[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fj56RMkoCmS0ykQLBCZKlXbR3Al-uKYkButH2ktGDx8U":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":17,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":43,"controls":44},"bd658508-2853-46ef-9a9f-a7d46b1188e3","186-fake-ai-domains-lure-users-into-installing-browser-malware","63025e7b-deb3-451b-8df5-1fd4a598f352","186 Fake AI Domains Lure Users Into Installing Browser Malware","Attackers registered 186 domains impersonating popular AI tools, exploiting user trust and typographical errors to redirect victims to ClickFix lures, browser hijackers, and malicious extensions. This campaign, dubbed TypoPrompting, succeeded primarily because end users cannot reliably distinguish legitimate AI tool domains from convincing fakes. The browser-based malware installed as a result can silently manipulate search results and exfiltrate user data. This matters because the attack requires no software vulnerability — only a user's moment of inattention — making human awareness and technical safeguards both essential defenses.","**Immediate actions:**\n- Verify AI tool URLs against official vendor websites before entering credentials or running suggested commands.\n- Block known malicious domains identified in this campaign at the DNS or web proxy layer.\n- Audit browser extensions across the organization and remove any unauthorized or unrecognized ones.\n\n**Long-term improvements:**\n- Maintain and enforce an approved-software and approved-domain allowlist for AI tools employees are permitted to use.\n- Subscribe to threat intelligence feeds that surface newly registered lookalike or typosquat domains targeting popular services.\n- Deploy DNS filtering and secure web gateway solutions that automatically block malicious or uncategorized newly registered domains.\n\n**Detection measures:**\n- Monitor endpoint telemetry for unexpected browser extension installations or changes to default search engine settings.\n- Alert on ClickFix-style PowerShell or clipboard-based command execution patterns triggered from browser sessions.\n- Train employees to recognize and report ClickFix social-engineering prompts (e.g., instructions to paste commands into a terminal).",[12,13,14,15,16],"MITRE ATT&CK T1583.001: Acquire Infrastructure: Domains","MITRE ATT&CK T1176: Browser Extensions","CIS Control 9: Email and Web Browser Protections (v8)","NIS2 Article 21(2)(g)","NIST SP 800-53 SC-7: Boundary Protection",{"NIS2 Article 21(2)(g)":18,"MITRE ATT&CK T1176: Browser Extensions":19,"NIST SP 800-53 SC-7: Boundary Protection":20,"CIS Control 9: Email and Web Browser Protections (v8)":21,"MITRE ATT&CK T1583.001: Acquire Infrastructure: Domains":22},"This point mandates basic cyber hygiene and training, which is the primary defense against typosquatting and ClickFix social-engineering attacks that rely on users not recognizing malicious prompts.","The campaign delivered search-hijacking browser extensions (Net Guard) as a payload, which this technique covers as a method attackers use to establish persistence and manipulate browser behavior.","SC-7 requires filtering and monitoring of communications at system boundaries, which would enable organizations to block traffic to known malicious or lookalike domains before users are exposed.","CIS Control 9 requires organizations to filter and block access to malicious or uncategorized web domains, which would have prevented users from reaching the fake AI sites.","Attackers deliberately registered 186 lookalike domains to support the TypoPrompting campaign, which is exactly the infrastructure-acquisition technique this entry describes.","published","2026-11-12T17:23:03.67237+00:00","2026-11-12T17:23:03.655+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F11\u002F186-fake-ai-domains-redirect-users-to.html","186-fake-ai-domains-redirect-users-to-clickfix-lures-browser-malware-and-search-9d9670","186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers",[31,37],{"id":32,"name":33,"slug":34,"description":35,"color":36},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":38,"name":39,"slug":40,"description":41,"color":42},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",[],[45,49,53],{"slug":46,"name":47,"problem":48},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":50,"name":51,"problem":52},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":54,"name":55,"problem":56},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them."]