Check Point Researchers Uncover Prompt Adware in OpenAI Codex Jailbreak
Haiou jailbreak modifies AI instructions to insert ads for zz.aiapi2025.top in responses, forked 77 times on GitHub.
1
Stories per day · 30 days
4 RSS
Relatedchrome3google-play2hizbartech2impersonation2search-hijacking2android1bing1brand-abuse1browser-extensions1chrome-extensions1chrome-web-store1fake-app1google-ads1jailbreak1mobile1prompt-injection1yahoo1
12 stories, newest first · one card per story
Stories tagged #adware
Fake PDF and search tools hijacked searches for 13.4 million Chrome users
Socket tied 319 mostly unlisted Chrome Web Store extensions, promoted by ads, to query proxying toward Yahoo or Bing.
1
319 Chrome extensions with 13.4 million installs hijacked searches
Socket says operators swapped the default search engine and proxied queries for Bing and Yahoo referral payments; most listings are now gone.
1
Google Play Hosted Fake Chrome App With 100,000+ Downloads
Google Play hosted a Hizbartech fake Chrome app, later removed, that showed 100,000-plus downloads.
6
Fake Chrome App on Google Play Evades Detection and Reaches 100,000+ Downloads
A Hizbartech app impersonated Chrome on Google Play and showed a disputed 100,000-download badge before apparent removal.
5
Low-cost Android phones are arriving with malware that owners can’t uninstall
Bitdefender found preinstalled Midnight Mimosa malware on budget Android phones that owners cannot uninstall.
Google’s Early Access is creating a blind spot for malicious apps
Bitdefender found thousands of Google Play Early Access apps with deceptive behavior, including ad-fraud-capable utilities requesting excessive permissions on Android devices.
ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions
Silver Fox distributes ValleyRAT via signed QN Wallpaper adware, sideloading a malicious libcef.dll into a trusted process to evade defenses.
ValleyRAT masquerading as adware
Kaspersky reports threat actors distributing the ValleyRAT backdoor disguised as adware, tracing the infection chain to the final payload.
The invisible passenger in your car
Kaspersky discovered Android adware and proxy-botnet malware delivered inside legitimate DoFun car head-unit software.
KRBanker Targets South Korea Through Adware and Exploit Kits
Unit 42 details KRBanker banking trojan targeting South Korean bank users via KaiXin exploit kit and NEWSPOT adware, using pharming and process hollowing.
4
ApateWeb: An Evasive Large-Scale Scareware and PUP Delivery Campaign
Unit 42 uncovers ApateWeb, a campaign using over 130,000 domains and multilayered redirects to deliver scareware, adware and PUPs to millions of users.