186 Fake AI Domains Lure Users Into Installing Browser Malware
Written by AI from the linked story. Not reviewed by an editor. How this works
Attackers registered 186 domains impersonating popular AI tools, exploiting user trust and typographical errors to redirect victims to ClickFix lures, browser hijackers, and malicious extensions. This campaign, dubbed TypoPrompting, succeeded primarily because end users cannot reliably distinguish legitimate AI tool domains from convincing fakes. The browser-based malware installed as a result can silently manipulate search results and exfiltrate user data. This matters because the attack requires no software vulnerability — only a user's moment of inattention — making human awareness and technical safeguards both essential defenses.
Tactical Insight
Immediate actions
- Verify AI tool URLs against official vendor websites before entering credentials or running suggested commands.
- Block known malicious domains identified in this campaign at the DNS or web proxy layer.
- Audit browser extensions across the organization and remove any unauthorized or unrecognized ones.
Long-term improvements
- Maintain and enforce an approved-software and approved-domain allowlist for AI tools employees are permitted to use.
- Subscribe to threat intelligence feeds that surface newly registered lookalike or typosquat domains targeting popular services.
- Deploy DNS filtering and secure web gateway solutions that automatically block malicious or uncategorized newly registered domains.
Detection measures
- Monitor endpoint telemetry for unexpected browser extension installations or changes to default search engine settings.
- Alert on ClickFix-style PowerShell or clipboard-based command execution patterns triggered from browser sessions.
- Train employees to recognize and report ClickFix social-engineering prompts (e.g., instructions to paste commands into a terminal).