[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBQAhbOAwedJ9o-hrRocyDTm5xb79VuDpfuxSDvDhYq8":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":17,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":43,"controls":44},"b4f95c63-b3f4-4af0-bc75-600817cbff0b","typosquatting-ai-domains-deliver-malware-via-fake-verification-pages","ae2b3624-ed80-425d-8392-313edbc53f4b","Typosquatting AI Domains Deliver Malware via Fake Verification Pages","Attackers registered 186 lookalike domains impersonating popular AI tools like ChatGPT and Claude, exploiting the natural tendency of users to mistype URLs. Victims landing on these sites are presented with convincing fake verification pages embedding hidden prompt-injection commands (ClickFix-style lures) or malware installers disguised as legitimate software. The attack requires no vulnerability in the real AI platforms — the entire exploit chain depends on a moment of inattention from the user. This matters because the technique scales cheaply across dozens of brands and adapts its payload based on the victim's operating system, maximizing impact. Organizations that fail to train users on URL vigilance and browser safety practices are leaving a wide-open social engineering surface.","**Immediate actions:**\n- Train all staff to verify AI tool URLs carefully and bookmark official sites rather than typing addresses manually.\n- Configure enterprise DNS filtering or secure web gateways to block known typosquatting and lookalike domains.\n- Alert users to never execute clipboard-pasted commands or run installers prompted by a website verification page.\n\n**Long-term improvements:**\n- Run regular phishing and typosquatting simulation exercises targeting AI and SaaS tool impersonation scenarios.\n- Establish a process to monitor and report newly registered lookalike domains for AI tools used by the organization.\n- Restrict end-user ability to install browser extensions or run unsigned executables without IT approval.\n\n**Detection measures:**\n- Deploy endpoint detection and response (EDR) tools capable of flagging suspicious installer executions or unexpected browser extension installations.\n- Enable browser-level safe-browsing protections and certificate transparency monitoring to catch newly spun-up impersonation sites.\n- Review proxy and DNS logs for user traffic to domains that closely resemble sanctioned AI service hostnames.",[12,13,14,15,16],"MITRE ATT&CK T1204.002: User Execution – Malicious File","MITRE ATT&CK T1583.001: Acquire Infrastructure – Domains","NIS2 Article 21(2)(g)","CIS Control 9: Email and Web Browser Protections (v8)","NIST SP 800-53 AT-2: Literacy Training and Awareness",{"NIS2 Article 21(2)(g)":18,"NIST SP 800-53 AT-2: Literacy Training and Awareness":19,"CIS Control 9: Email and Web Browser Protections (v8)":20,"MITRE ATT&CK T1204.002: User Execution – Malicious File":21,"MITRE ATT&CK T1583.001: Acquire Infrastructure – Domains":22},"This point requires organizations to implement basic cyber hygiene and security training, which would directly reduce susceptibility to typosquatting lures that depend on users failing to verify URLs.","This control requires organizations to provide security awareness training that covers social engineering threats, directly addressing the user inattention that TypoPrompting campaigns exploit.","This control calls for filtering and blocking access to malicious or unauthorized web destinations, which would prevent users from reaching lookalike AI domains even after a URL typo.","The attack relies on victims manually running malware installers or pasting clipboard commands served from fake verification pages, matching this technique's definition of user-initiated execution of malicious content.","Attackers pre-registered 186 lookalike domains across 27 AI brands specifically to intercept mistyped traffic, which is precisely the adversary infrastructure acquisition this technique describes.","published","2026-11-13T16:20:24.743468+00:00","2026-11-13T16:20:24.722+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fcybersecuritynews.com\u002Fnew-typoprompting-attacks\u002F","new-typoprompting-attacks-turn-mistyped-ai-website-addresses-into-malware-instal-28e90d","New TypoPrompting Attacks Turn Mistyped AI Website Addresses Into Malware Installation Traps",[31,37],{"id":32,"name":33,"slug":34,"description":35,"color":36},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":38,"name":39,"slug":40,"description":41,"color":42},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",[],[45,49,53],{"slug":46,"name":47,"problem":48},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":50,"name":51,"problem":52},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":54,"name":55,"problem":56},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes."]