#typoprompting — Public Fediverse posts

#TypoPrompting is the name given to the most recent batches of #malware available for your accidental perusal.

Cybersecurity researchers have found that lookalike domains masquerading as #AI tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches.

While one category leads to a #ClickFix lure that serves a PowerShell command via a fake #Cloudflare verification page, the second route takes users to "Security Check" pages that deliver a browser-hijacking malware called #NetGuard. The third pathway sends users to a search-hijack extension family with 16 live Chrome Web Store listings and 972,000 declared users.

https://thehackernews.com/2026/11/186-fake-ai-domains-redirect-users-to.html

AI Lookalike Domains Redirect Users to Browser Malware and Search Hijackers

Beware of AI lookalike domains that can redirect you to malware and search hijackers - a new campaign uses 186 fake domains to trick users into installing malicious software. These bogus sites impersonate popular AI brands, including ChatGPT and Google Gemini, to get you to verify, install, or run something…

https://osintsights.com/ai-lookalike-domains-redirect-users-to-browser-malware-and-search-hijackers?utm_source=mastodon&utm_medium=social

#Typoprompting #AiLookalikeDomains #BrowserMalware #SearchHijacking #EmergingThreats