Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches.
This delivery pattern has been codenamed TypoPrompting by Island.
“AI-app lookalikes that turn an attempt to reach a familiar tool into a prompt to verify,
Source: The Hacker News · 2026-11-12