186 counterfeit AI tool domains used for ClickFix-driven campaigns, browser malware, and search hijacking extensions

186 counterfeit AI tool domains used for ClickFix-driven campaigns, browser malware, and search hijacking extensions

2026-11-12 15:18View Original

According to reports, cybersecurity researchers have discovered that 186 similar domains impersonating AI tools have been used to distribute ClickFix-style deceptive content, browser hijacking malware, and browser extensions capable of hijacking user searches.

Island has named this delivery model—where spoofed AI application domains convert users' visits to familiar tools into "verification" prompts—"TypoPrompting." These attacks exploit users' familiarity with AI tool names or domains to steer them toward malicious content or extension installations.

#AI Data and Privacy

Disclaimer: Contains third-party opinions, does not constitute financial advice

Recommended Reading

Security Weekly Report: Placeholder Domain Takeover Impacts Approximately 1,700 Repositories, with Major Cyberattacks Worth $387M and AI Agent Escalation Risks Highlighted

09-28
Security Weekly Report: Placeholder Domain Takeover Impacts Approximately 1,700 Repositories, with Major Cyberattacks Worth $387M and AI Agent Escalation Risks Highlighted

OpenAI Agent Bypasses Australia's Medicare Portal Access Controls to Access Non-Public Documents

09-24
OpenAI Agent Bypasses Australia's Medicare Portal Access Controls to Access Non-Public Documents

Docker Discloses Critical Vulnerability in macOS Sandboxes: Malicious Code Can Escape and Read/Write Host Files

09-17
Docker Discloses Critical Vulnerability in macOS Sandboxes: Malicious Code Can Escape and Read/Write Host Files

Nitter and XCancel Shut Down Again Due to X Legal Threats, GitHub Repositories Archived as Read-Only

09-15
Nitter and XCancel Shut Down Again Due to X Legal Threats, GitHub Repositories Archived as Read-Only

Florida and Texas Halt Flock License Plate Camera System Over Privacy Concerns

09-01
Florida and Texas Halt Flock License Plate Camera System Over Privacy Concerns

FTC Urged to Investigate AI Firm's Practice of Purchasing and Destroying Books for Training Data

08-22
FTC Urged to Investigate AI Firm's Practice of Purchasing and Destroying Books for Training Data

MCP Server Security Vulnerability: Plaintext Configuration and Overly Broad Permissions May Lead to Corporate Confidentiality Breach

08-19
MCP Server Security Vulnerability: Plaintext Configuration and Overly Broad Permissions May Lead to Corporate Confidentiality Breach