Typosquatting AI Domains Deliver Malware via Fake Verification Pages
Written by AI from the linked story. Not reviewed by an editor. How this works
Attackers registered 186 lookalike domains impersonating popular AI tools like ChatGPT and Claude, exploiting the natural tendency of users to mistype URLs. Victims landing on these sites are presented with convincing fake verification pages embedding hidden prompt-injection commands (ClickFix-style lures) or malware installers disguised as legitimate software. The attack requires no vulnerability in the real AI platforms — the entire exploit chain depends on a moment of inattention from the user. This matters because the technique scales cheaply across dozens of brands and adapts its payload based on the victim's operating system, maximizing impact. Organizations that fail to train users on URL vigilance and browser safety practices are leaving a wide-open social engineering surface.
Tactical Insight
Immediate actions
- Train all staff to verify AI tool URLs carefully and bookmark official sites rather than typing addresses manually.
- Configure enterprise DNS filtering or secure web gateways to block known typosquatting and lookalike domains.
- Alert users to never execute clipboard-pasted commands or run installers prompted by a website verification page.
Long-term improvements
- Run regular phishing and typosquatting simulation exercises targeting AI and SaaS tool impersonation scenarios.
- Establish a process to monitor and report newly registered lookalike domains for AI tools used by the organization.
- Restrict end-user ability to install browser extensions or run unsigned executables without IT approval.
Detection measures
- Deploy endpoint detection and response (EDR) tools capable of flagging suspicious installer executions or unexpected browser extension installations.
- Enable browser-level safe-browsing protections and certificate transparency monitoring to catch newly spun-up impersonation sites.
- Review proxy and DNS logs for user traffic to domains that closely resemble sanctioned AI service hostnames.