[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f23PVB0hWBpiZl8i01f0e1cglculXx9YbFN6vPvxfxZs":3},{"article":4,"iocs":49,"watch_terms":67,"solutions":68,"lesson":155},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"ae2b3624-ed80-425d-8392-313edbc53f4b","New TypoPrompting Attacks Turn Mistyped AI Website Addresses Into Malware Installation Traps","new-typoprompting-attacks-turn-mistyped-ai-website-addresses-into-malware-instal-28e90d","A simple typing mistake can now cost you more than a failed page load. Researchers have found that mistyped addresses of popular AI tools lead to fake verification pages, hidden commands and malware installers. The technique is called TypoPrompting. The research traced 186 lookalike domains across 27 AI brands, including Claude, ChatGPT, DeepSeek, Perplexity, Midjourney, […] The post New TypoPrompting Attacks Turn Mistyped AI Website Addresses Into Malware Installation Traps appeared first on Cyber Security News.","Researchers have identified a new technique called TypoPrompting where mistyped addresses of popular AI tools lead to fake verification pages, hidden commands, and malware installers. The campaign has traced 186 lookalike domains across 27 AI brands, with ChatGPT and Claude having the most. Depending on the visitor's system, these typos can result in lures like ClickFix, Microsoft Store-signed hijackers, or search-changing browser extensions.","TypoPrompting attacks exploit mistyped AI website addresses to deliver malware and hijackers.","https:\u002F\u002Fcybersecuritynews.com\u002Fnew-typoprompting-attacks\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FNew-TypoPrompting-Attacks-Turn-Mistyped-AI-Website-Addresses-Into-Malware-Installation-Traps.webp","2026-11-13T15:24:38+00:00","2026-11-13T16:00:26.906022+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"AI","technology",{"name":21,"type":22},"ChatGPT","product",{"name":24,"type":22},"Claude",{"name":26,"type":22},"DeepSeek",{"name":28,"type":22},"Perplexity",{"name":30,"type":22},"Midjourney","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":31,"icon":33,"name":34,"slug":35},null,"Malware","malware",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,58,61,64],{"type":51,"value":52,"context":53},"domain","a11.click","Monetized portfolio of domains tied to a redirector",{"type":55,"value":56,"context":57},"ip","185.138.88.3","IP address used for script download in decimal form",{"type":51,"value":59,"context":60},"deezyj.com","Domain leading to fake 'Security Check' pages",{"type":35,"value":62,"context":63},"Net Guard","Microsoft Store-signed hijacker delivered via typo domains",{"type":35,"value":65,"context":66},"buntai-sdk","Module used by Net Guard for remote configuration and browser manipulation",[21,24,26],{"controls":69,"vendors":154},[70,99,128],{"slug":71,"name":72,"problem":73,"products":74},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[75,83,91],{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"slug":100,"name":101,"problem":102,"products":103},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",[104,112,120],{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-swg","Netskope Secure Web Gateway","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fnext-gen-swg","Cloud secure web gateway with inspection of web and cloud app traffic.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","umbrella","Cisco Umbrella","https:\u002F\u002Fumbrella.cisco.com\u002F","DNS-layer security and secure web gateway delivered from the cloud.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-gateway","Cloudflare Gateway","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fgateway\u002F","DNS filtering and secure web gateway.",{"slug":129,"name":130,"problem":131,"products":132},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[133,141,149],{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"vendor_slug":142,"vendor_name":143,"vendor_logo":144,"product_slug":145,"product_name":146,"url":147,"description":148},"mimecast","Mimecast","\u002Fvendor-logos\u002Fmimecast.png","mimecast-email-security","Mimecast Email Security","https:\u002F\u002Fwww.mimecast.com\u002Fproducts\u002Femail-security\u002F","Email filtering, impersonation protection and continuity.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":150,"product_name":151,"url":152,"description":153},"cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",[],{"slug":156,"title":157,"body":158,"framework_refs":159,"framework_notes":165},"typosquatting-ai-domains-deliver-malware-via-fake-verification-pages","Typosquatting AI Domains Deliver Malware via Fake Verification Pages","Attackers registered 186 lookalike domains impersonating popular AI tools like ChatGPT and Claude, exploiting the natural tendency of users to mistype URLs. Victims landing on these sites are presented with convincing fake verification pages embedding hidden prompt-injection commands (ClickFix-style lures) or malware installers disguised as legitimate software. The attack requires no vulnerability in the real AI platforms — the entire exploit chain depends on a moment of inattention from the user. This matters because the technique scales cheaply across dozens of brands and adapts its payload based on the victim's operating system, maximizing impact. Organizations that fail to train users on URL vigilance and browser safety practices are leaving a wide-open social engineering surface.",[160,161,162,163,164],"MITRE ATT&CK T1204.002: User Execution – Malicious File","MITRE ATT&CK T1583.001: Acquire Infrastructure – Domains","NIS2 Article 21(2)(g)","CIS Control 9: Email and Web Browser Protections (v8)","NIST SP 800-53 AT-2: Literacy Training and Awareness",{"NIS2 Article 21(2)(g)":166,"NIST SP 800-53 AT-2: Literacy Training and Awareness":167,"CIS Control 9: Email and Web Browser Protections (v8)":168,"MITRE ATT&CK T1204.002: User Execution – Malicious File":169,"MITRE ATT&CK T1583.001: Acquire Infrastructure – Domains":170},"This point requires organizations to implement basic cyber hygiene and security training, which would directly reduce susceptibility to typosquatting lures that depend on users failing to verify URLs.","This control requires organizations to provide security awareness training that covers social engineering threats, directly addressing the user inattention that TypoPrompting campaigns exploit.","This control calls for filtering and blocking access to malicious or unauthorized web destinations, which would prevent users from reaching lookalike AI domains even after a URL typo.","The attack relies on victims manually running malware installers or pasting clipboard commands served from fake verification pages, matching this technique's definition of user-initiated execution of malicious content.","Attackers pre-registered 186 lookalike domains across 27 AI brands specifically to intercept mistyped traffic, which is precisely the adversary infrastructure acquisition this technique describes."]