{"id":"CMP-202611-volmsb","kind":"campaign","aliases":[],"related":[],"title":"TypoPrompting: 186 misspelled AI tool domains (cloude.ai, chatlgpt.com, preplexity.ai...) push ClickFix PowerShell commands, the Net Guard browser hijacker and search-hijacking Chrome extensions (Island)","description":null,"summary":"Island found 186 lookalike domains for 27 AI brands (Claude, ChatGPT, Gemini, NotebookLM, Copilot, Grok, DeepSeek, Mistral, Perplexity, Midjourney, ElevenLabs, Lovable, Cursor). Someone who mistypes the address gets one of three things: a fake Cloudflare check that tells them to paste a PowerShell command on Windows or a shell command on macOS, or to download and run an archive (ClickFix); a fake 'Security Check' page that installs Net Guard, a browser hijacker that runs attacker JavaScript, changes the search engine and installs Chrome extensions; or the Quick Search Chrome extension, which sends every search to find.flashysearches[.]com. Quick Search is one of 16 such Chrome Web Store extensions, including 'GPT for Chrome', with 972,000 users in total (3 Nov 2026). The same fingerprinting script also sits on lookalike domains for Scotiabank, Charles Schwab, Blue Cross Blue Shield, Verizon, ServiceNow and Microsoft Azure (211 entry domains). Some domains were registered as early as 13 Jul 2023. Which organisations were hit is unknown.","severity":"medium","cvss":null,"epss":null,"exploited":true,"exploited_at":"2026-11-12T15:34:10+00:00","products":[{"name":"Google Chrome","fixed":[]},{"name":"ChatGPT","fixed":[]},{"name":"Claude","fixed":[]},{"name":"Perplexity","fixed":[]}],"ecosystems":[],"tags":["campaign","early-warning"],"not_affected_if":[],"how_to_check":"DNS or proxy logs with visits to cloude[.]ai, cluade[.]ai, clsude[.]ai, chatlgpt[.]com, geimini[.]com, notebookklm[.]com, griok[.]com, preplexity[.]ai, deepceek[.]com, elevenlebs[.]io, copiot[.]com, midj0urney[.]org (the full list of 186 is in Island's report). Browsers whose default search engine is find.flashysearches[.]com, or that have the 'Quick Search' or 'GPT for Chrome' extension. A 'Net Guard' MSIX app installed on Windows. A browser 'verify you are human' or 'security update' page that asks you to paste a command into Run, PowerShell or Terminal.","fix":"Bookmark the real AI tool URLs, or push them from your management tools, and block the listed lookalike domains. Remove Quick Search, GPT for Chrome and other extensions that change the search engine, and allow-list extensions where you can. Uninstall Net Guard. If someone pasted a command from one of these pages, treat the machine as infected: isolate it and change the passwords and tokens used on it.","status":"open","published_at":null,"first_seen_at":"2026-11-12T15:34:10+00:00","triaged_at":"2026-11-12T15:34:10+00:00","updated_at":"2026-11-12T15:35:39+00:00","category":"other","confidence":null,"triage":{"cause":{"at":"2026-11-12T15:35:27Z","path":"tampered-install","entry":"unknown","reason":"The record says the victims are unknown and does not describe how an attacker got into any organisation, while users who mistyped AI tool domains were led to install Net Guard, Chrome extensions such as Quick Search and GPT for Chrome, or to paste ClickFix commands.","confidence":0.8}},"analyst_status":"done","analyst_note":null,"search":"'-202611':27A '000':152B '13':191B '16':140B '186':2A,40B '2023':193B '2026':158B '211':181B '27':44B '3':156B '972':151B 'address':64B 'ai':4A,45B 'also':163B 'archiv':96B 'attack':112B 'azur':180B 'blue':172B,174B 'brand':46B 'browser':17A,108B 'campaign':34B 'chang':114B 'charl':170B 'chatgpt':31A,48B 'chatlgpt.com':8A 'check':73B,101B 'chrome':23A,30A,120B,126B,142B,149B 'claud':47B 'claude':32A 'clickfix':11A,97B 'cloude.ai':7A 'cloudflar':72B 'cmp':26A 'com':134B 'command':13A,81B,87B 'copilot':51B 'cross':173B 'cursor':59B 'deepseek':53B 'domain':6A,42B,167B,183B,185B 'download':92B 'earli':36B,189B 'early-warn':35B 'elevenlab':57B 'engin':117B 'entri':182B 'everi':130B 'extens':24A,121B,127B,145B 'fake':71B,99B 'find.flashysearches':133B 'fingerprint':161B 'found':39B 'gemini':49B 'get':65B 'google':29A 'gpt':147B 'grok':52B 'guard':16A,106B 'hijack':18A,22A,109B 'hit':197B 'includ':146B 'instal':104B,119B 'island':25A,38B 'javascript':113B 'jul':192B 'lookalik':41B,166B 'lovabl':58B 'maco':89B 'microsoft':179B 'midjourney':56B 'misspel':3A 'mistral':54B 'mistyp':62B 'net':15A,105B 'notebooklm':50B 'nov':157B 'one':66B,138B 'organis':195B 'page':102B 'past':78B 'perplex':55B 'perplexity':33A 'powershel':12A,80B 'preplexity.ai':9A 'push':10A 'quick':124B,135B 'regist':187B 'run':94B,111B 'schwab':171B 'scotiabank':169B 'script':162B 'search':21A,116B,125B,131B,136B 'search-hijack':20A 'secur':100B 'send':129B 'servicenow':177B 'shell':86B 'shield':175B 'sit':164B 'someon':60B 'store':144B 'tell':75B 'thing':69B 'three':68B 'tool':5A 'total':155B 'typoprompt':1A 'unknown':199B 'user':153B 'verizon':176B 'volmsb':28A 'warn':37B 'web':143B 'window':83B","nicknames":["TypoPrompting","Net Guard","Quick Search"],"mitigations":[],"who_affected":null,"tier":"A","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["chatgpt","chrome","claude","googlechrome","netguard","perplexity","quicksearch","typoprompting"],"ptokens":["chatgpt","chrome","claude","google","perplexity"],"labels":["campaign","earlywarning","medium","other"],"campaign_type":"malware","search_a":"'-202611':27A '186':2A 'ai':4A 'browser':17A 'chatgpt':31A 'chatlgpt.com':8A 'chrome':23A,30A 'claude':32A 'clickfix':11A 'cloude.ai':7A 'cmp':26A 'command':13A 'domain':6A 'extens':24A 'google':29A 'guard':16A 'hijack':18A,22A 'island':25A 'misspel':3A 'net':15A 'perplexity':33A 'powershel':12A 'preplexity.ai':9A 'push':10A 'search':21A 'search-hijack':20A 'tool':5A 'typoprompt':1A 'volmsb':28A","search_b":"'000':152B '13':191B '16':140B '186':40B '2023':193B '2026':158B '211':181B '27':44B '3':156B '972':151B 'address':64B 'ai':45B 'also':163B 'archiv':96B 'attack':112B 'azur':180B 'blue':172B,174B 'brand':46B 'browser':108B 'campaign':34B 'chang':114B 'charl':170B 'chatgpt':48B 'check':73B,101B 'chrome':120B,126B,142B,149B 'claud':47B 'clickfix':97B 'cloudflar':72B 'com':134B 'command':81B,87B 'copilot':51B 'cross':173B 'cursor':59B 'deepseek':53B 'domain':42B,167B,183B,185B 'download':92B 'earli':36B,189B 'early-warn':35B 'elevenlab':57B 'engin':117B 'entri':182B 'everi':130B 'extens':121B,127B,145B 'fake':71B,99B 'find.flashysearches':133B 'fingerprint':161B 'found':39B 'gemini':49B 'get':65B 'gpt':147B 'grok':52B 'guard':106B 'hijack':109B 'hit':197B 'includ':146B 'instal':104B,119B 'island':38B 'javascript':113B 'jul':192B 'lookalik':41B,166B 'lovabl':58B 'maco':89B 'microsoft':179B 'midjourney':56B 'mistral':54B 'mistyp':62B 'net':105B 'notebooklm':50B 'nov':157B 'one':66B,138B 'organis':195B 'page':102B 'past':78B 'perplex':55B 'powershel':80B 'quick':124B,135B 'regist':187B 'run':94B,111B 'schwab':171B 'scotiabank':169B 'script':162B 'search':116B,125B,131B,136B 'secur':100B 'send':129B 'servicenow':177B 'shell':86B 'shield':175B 'sit':164B 'someon':60B 'store':144B 'tell':75B 'thing':69B 'three':68B 'total':155B 'unknown':199B 'user':153B 'verizon':176B 'warn':37B 'web':143B 'window':83B","search_c":"","cause_entry":"unknown","cause_path":"tampered-install","disclosures_checked_at":null,"first_public_at":"2026-11-12T15:15:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"analyst","external_id":"CMP-202611-volmsb","url":"https://thehackernews.com/2026/11/186-fake-ai-domains-redirect-users-to.html","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-12T15:34:10+00:00","fetched_at":"2026-11-12T15:34:10+00:00","note":null,"cites":["https://thehackernews.com/2026/11/186-fake-ai-domains-redirect-users-to.html"]}],"documents":[{"id":135917,"url":"https://x.com/TheHackersNews/status/2120898921711157320","title":"@TheHackersNews: 🚨 186 fake domains impersonate ChatGPT, Claude, Gemini and 24 other AI brands.\n\n","kind":"post","source":"x","publisher":null,"text":"🚨 186 fake domains impersonate ChatGPT, Claude, Gemini and 24 other AI brands.\n\nA mistyped URL can lead to fake security checks, malware downloads or Chrome extensions that hijack searches.\n\nHow the scheme works: https://t.co/x6q2YleMrZ\n\nlikes 17 reposts 3","published_at":"2026-11-12T15:18:01+00:00","relation":"describes","confidence":null,"note":null},{"id":135936,"url":"https://thehackernews.com/2026/11/186-fake-ai-domains-redirect-users-to.html","title":"186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers","kind":"blog","source":"analyst","publisher":null,"text":"Island research (TypoPrompting): 186 lookalike domains across 27 AI brands (Claude, ChatGPT, Gemini, NotebookLM, Copilot, Grok, DeepSeek, Mistral, Perplexity, Midjourney, ElevenLabs, Lovable, Cursor). Routes: ClickFix fake Cloudflare verification (PowerShell; macOS shell command; archive executable), fake Security Check pages delivering Net Guard browser hijacker, Quick Search Chrome extension overriding search to find.flashysearches[.]com (16 extensions, 972,000 users incl. GPT for Chrome). Domains: cloude[.]ai cluade[.]ai clsude[.]ai chatlgpt[.]com geimini[.]com notebookklm[.]com griok[.]com preplexity[.]ai deepceek[.]com elevenlebs[.]io copiot[.]com midj0urney[.]org. Fingerprint gate spans 211 entry domains incl. Scotiabank, Charles Schwab, Blue Cross Blue Shield, Verizon, ServiceNow, Microsoft Azure lookalikes.","published_at":"2026-11-12T15:15:00+00:00","relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}