Skip to content
NewA calmer, faster ZeroHour
Malwarehigh

TypoPrompting turns mistyped AI site addresses into malware lures

Original title: New TypoPrompting Attacks Turn Mistyped AI Website Addresses Into Malware Installation Traps

Cyber Security Newsby Tushar Subhra Dutta ()5 min read
Read at cybersecuritynews.com
Part of a story covered by 3 sourcesTypoPrompting: 186 AI lookalikes route users to malwareMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Island traced 186 lookalike domains across 27 AI brands to ClickFix commands, signed hijackers, and search extensions.

Island researchers named TypoPrompting after finding mistyped addresses for popular AI tools that lead to fake verification pages, hidden commands, and malware installers. ChatGPT had 25 lookalikes, Claude 18, and DeepSeek 16. Chains include a ClickFix PowerShell download, a Microsoft Store-signed Net Guard hijacker, and a no-permission Chrome extension that reroutes address-bar searches.

Unconfirmed: Which lure a visitor receives depends on location, operating system, and browser fingerprinting.

Key facts
  • Researchers found 550 scan records across 211 entry domains, not only AI brands.
  • The cloude.ai chain saves W901.ps1 and runs it in hidden PowerShell.
  • Seventeen related extensions still listed showed 972,000 users on November 3.
  • Net Guard, Privacy Keeper, and MyFlixly Browser were classed as hijackers.
  • Island published the research on November 12, 2026.
Security assessment · AI, from the article

Impact: Malware install, search hijacking, or remote browser control

What to do
  1. 1.Give staff direct links or bookmarks to approved AI services.
  2. 2.Check publisher and hash of MSIX installers before allowing them.
  3. 3.Hunt from lookalike entry domains through to endpoint changes.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
ATT&CK
T1583.001 Acquire Infrastructure: DomainsT1204.004 User Execution: Malicious Copy and PasteT1059.001 Command and Scripting Interpreter: PowerShellT1176 Browser Extensions
Tags
typosquattingclickfixbrowser-hijackerai-brandsnet-guardsearch-hijacking
Vendors
Microsoft
Products
ChatGPTClaudeDeepSeek
Malware
Net GuardPrivacy KeeperMyFlixly Browser
Organizations
Island

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
domaina11.clicka monetized portfolio of 81 domains tied to the redirector a11[.]click. Three traced AI lookalikes lead to a ClickFix lure (Sour
domainbiomimicrydevtech.buzzdirect feed into the ClickFix route ClickFix infrastructure biomimicrydevtech[.]buzz Traffic distribution hop ClickFix infrastructure blockcha
domainblockchainfuturedev.buzzech[.]buzz Traffic distribution hop ClickFix infrastructure blockchainfuturedev[.]buzz Fingerprinting gate and fake verification lure ClickFix i
domaincaude.aiClaude lookalike used in the keyboard example AI lookalike caude[.]ai, cluade[.]ai, claudie[.]ai, ckaude[.]ai Claude typos reac
domainchatlgpt.como reaching a search-hijacking extension funnel AI lookalike chatlgpt[.]com Fake ChatGPT desktop download, October–November 2026 AI l
domainckaude.aiexample AI lookalike caude[.]ai, cluade[.]ai, claudie[.]ai, ckaude[.]ai Claude typos reaching installer landers AI lookalike deep
domainclaudie.aithe keyboard example AI lookalike caude[.]ai, cluade[.]ai, claudie[.]ai, ckaude[.]ai Claude typos reaching installer landers AI l
domaincloude.airomise (IoCs):- Category Indicator Description AI lookalike cloude[.]ai Claude typo reaching the ClickFix lure AI lookalike clsud
domainclsude.aide[.]ai Claude typo reaching the ClickFix lure AI lookalike clsude[.]ai Claude lookalike used in the keyboard example AI lookalik
domaincluade.aialike used in the keyboard example AI lookalike caude[.]ai, cluade[.]ai, claudie[.]ai, ckaude[.]ai Claude typos reaching installe
domaincopiot.compos reaching installer landers AI lookalike deepceek[.]com, copiot[.]com, elevenlebs[.]io, vocie[.]ai DeepSeek, Copilot, ElevenLab
domaindeepceek.come[.]ai Claude typos reaching installer landers AI lookalike deepceek[.]com, copiot[.]com, elevenlebs[.]io, vocie[.]ai DeepSeek, Copi
domaindeepsek.icuuted to Aurora stealer in AlienVault OTX, 2023 AI lookalike deepsek[.]icu Android payload attributed to OctoV2 by K7 Labs, early 20
domaindeezyj.comude, DeepSeek, Copilot, ElevenLabs and Voice AI led through deezyj[.]com to fake “Security Check” pages. These pages delivered Net
domainelevenlebs.ionstaller landers AI lookalike deepceek[.]com, copiot[.]com, elevenlebs[.]io, vocie[.]ai DeepSeek, Copilot, ElevenLabs and Voice AI ty
domainflashysearches.comanifest quietly sends every address-bar search through find.flashysearches[.]com. It is one of 30 extensions built from one kit. Thirteen
domainhailou.ailookalike perplixity[.]ai, perplexty[.]ai, perplecity[.]ai, hailou[.]ai, haiulo[.]ai, hygen[.]ai, viggie[.]ai, kiling[.]ai, klig[
domainhaiulo.aiplixity[.]ai, perplexty[.]ai, perplecity[.]ai, hailou[.]ai, haiulo[.]ai, hygen[.]ai, viggie[.]ai, kiling[.]ai, klig[.]ai, klign[.
domainhygen.aiperplexty[.]ai, perplecity[.]ai, hailou[.]ai, haiulo[.]ai, hygen[.]ai, viggie[.]ai, kiling[.]ai, klig[.]ai, klign[.]ai AI typos
domainkiling.aity[.]ai, hailou[.]ai, haiulo[.]ai, hygen[.]ai, viggie[.]ai, kiling[.]ai, klig[.]ai, klign[.]ai AI typos in the monetized a11[.]cl
domainklig.aiou[.]ai, haiulo[.]ai, hygen[.]ai, viggie[.]ai, kiling[.]ai, klig[.]ai, klign[.]ai AI typos in the monetized a11[.]click portfol
domainklign.aiiulo[.]ai, hygen[.]ai, viggie[.]ai, kiling[.]ai, klig[.]ai, klign[.]ai AI typos in the monetized a11[.]click portfolio AI lookal
domainmaccl0ude.comrShell filename used by the command ClickFix infrastructure maccl0ude[.]com Video host used by historical macOS lures Portfolio and i
domainmidj0urney.orghatGPT desktop download, October–November 2026 AI lookalike midj0urney[.]org Windows payload attributed to Aurora stealer in AlienVaul
domainnetguardprotect.comstaller landers Portfolio and installer netguardsite[.]com, netguardprotect[.]com Net Guard installer infrastructure Microsoft Store packag
domainnetguardsite.comfrom AI typos to installer landers Portfolio and installer netguardsite[.]com, netguardprotect[.]com Net Guard installer infrastructure
domainperplecity.aialler landers AI lookalike perplixity[.]ai, perplexty[.]ai, perplecity[.]ai, hailou[.]ai, haiulo[.]ai, hygen[.]ai, viggie[.]ai, kilin
domainperplexty.aios reaching installer landers AI lookalike perplixity[.]ai, perplexty[.]ai, perplecity[.]ai, hailou[.]ai, haiulo[.]ai, hygen[.]ai, v
domainperplixity.aiand Voice AI typos reaching installer landers AI lookalike perplixity[.]ai, perplexty[.]ai, perplecity[.]ai, hailou[.]ai, haiulo[.]a
domainpreplexity.aiI typos in the monetized a11[.]click portfolio AI lookalike preplexity[.]ai Perplexity typo reaching a search-hijacking extension fun
domainquickflashtool.com0dadc8e2d87 MyFlixly Browser 1.0.10.0 MSIX Search hijacking quickflashtool[.]com Extension installation funnel Search hijacking find.flash
domainsecuretrackingnode.como OctoV2 by K7 Labs, early 2025 ClickFix infrastructure xml.securetrackingnode[.]com Redirect feed into the ClickFix route ClickFix infrastruc
domainviggie.ai]ai, perplecity[.]ai, hailou[.]ai, haiulo[.]ai, hygen[.]ai, viggie[.]ai, kiling[.]ai, klig[.]ai, klign[.]ai AI typos in the monet
domainvocie.aiAI lookalike deepceek[.]com, copiot[.]com, elevenlebs[.]io, vocie[.]ai DeepSeek, Copilot, ElevenLabs and Voice AI typos reaching
ipv4185.138.88.3ten as the single number 3112851459. This is the IP address 185.138.88[.]3 in decimal form, so a filter looking for dotted IP addres
sha25651d577c84e50657d6cacf0e7738c9539ee4f39f76838423c682ad0dadc8e2d87cf74f6057863d681c52301 Privacy Keeper 1.0.10.0 MSIX SHA-256 51d577c84e50657d6cacf0e7738c9539ee4f39f76838423c682ad0dadc8e2d87 MyFlixly Browser 1.0.10.0 MSIX Search hijacking quickflasht
sha256a052b63e9c358c8911c17d1f58cce00949791f103fcf74f6057863d681c5230118342da104e4608f04e675ac6cb3 Net Guard 1.0.9.0 MSIX SHA-256 a052b63e9c358c8911c17d1f58cce00949791f103fcf74f6057863d681c52301 Privacy Keeper 1.0.10.0 MSIX SHA-256 51d577c84e50657d6cacf0
sha256bdddb50204d6867b4bd73d9cfe93cbc98c4518342da104e4608f04e675ac6cb3age 9PG42QDLFW8T MyFlixly Browser, version 1.0.10.0 SHA-256 bdddb50204d6867b4bd73d9cfe93cbc98c4518342da104e4608f04e675ac6cb3 Net Guard 1.0.9.0 MSIX SHA-256 a052b63e9c358c8911c17d1f58cc

From the original article

5 min read at cybersecuritynews.com

A simple typing mistake can now cost you more than a failed page load. Researchers have found that mistyped addresses of popular AI tools lead to fake verification pages, hidden commands and malware installers. The technique is called TypoPrompting.

Cyber Security News

By Tushar Subhra Dutta · cybersecuritynews.com

Read the full article at Cyber Security News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.