186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers

What happened

Cybersecurity firm Island discovered 186 fake websites imitating well-known AI services such as ChatGPT, Claude, and others. These domains were used to redirect visitors to harmful software, including ClickFix lures, Net Guard malware, and browser extensions that hijack search functions. The campaign, which Island calls TypoPrompting, has been active since at least July 2023. The fake sites prompt users to install or run malicious programs by mimicking legitimate verification or security checks.

Key details

• 186 fake domains were identified, targeting 27 different AI brands.
• Some domains were registered as early as July 13, 2023.
• One attack method uses a fake Cloudflare verification page to deliver a PowerShell command.
• Net Guard malware, disguised as a security tool, can change browser settings and install extensions.
• A family of 16 Chrome extensions involved in the campaign has a combined 972,000 users as of November 3, 2026.

Why it matters

People searching for popular AI tools are at risk of downloading malware or having their browser settings changed if they mistype a web address. Organizations and individuals could face security breaches, data leaks, or unwanted software installations as a result. The presence of nearly a million users of the affected browser extensions means a large number of people may already be impacted and need to review their browser security.