What Happened
186 fake AI domains are now serving ClickFix lures to anyone who mistypes or searches for a popular AI tool. For an MSP, the cost is a client with a hijacked browser, a search engine that redirects to ad pages, and hours of cleanup. EnterProtect backup for ClickFix is the recovery plan, but you need the facts first.
Cybersecurity researchers found the 186 lookalike domains masquerading as AI tools. Hackernews reported that these domains are used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches. Island codenamed this delivery pattern TypoPrompting.
Island described the pattern as 'AI-app lookalikes that turn an attempt to reach a familiar tool into a prompt to verify,' according to Hackernews. The domain looks like the AI tool the user wanted. The user gets a verification prompt instead.
In general, ClickFix lures ask a visitor to paste a command into a run dialog or terminal to prove they are human. That command downloads and runs malware. Browser-hijacking malware and search-hijacking extensions change browser settings without consent. They redirect searches and inject ads.
Timeline
- 2026-11-12: Hackernews publishes a report on the 186 fake AI domains.
Who Is Affected
The sources do not name specific victims. The 186 domains target users of AI tools, so any client who uses AI tools or searches for them can land on a lookalike. MSPs should treat every client that uses AI tools as potentially exposed.
No affected organizations, industries, or regions are listed in the story. The campaign is not tied to a single sector. It is a broad lookalike domain campaign that can reach any user who searches for an AI tool.
Technical Details
No CVE identifier is assigned to this campaign in the sources. The threat is not a software vulnerability. The attack vector is lookalike domains that masquerade as AI tools. Those domains serve ClickFix-style lures, browser-hijacking malware, and extensions that hijack user searches. Island codenamed the delivery pattern TypoPrompting.
The sources do not list specific product versions or affected software builds. The product category is AI tools. The attack relies on a user visiting a lookalike domain and following the prompt. There is no patch to apply for this delivery pattern.
Why EnterProtect Backup for ClickFix Matters After a Lure
A ClickFix infection can leave a client machine unusable for normal work. The browser redirects searches, extensions change settings, and malware may persist. Cleanup can take hours. In general, the fastest way back to a known good state is a clean backup.
EnterProtect backup keeps clean, restorable copies of client data and systems. If a machine is compromised, you can restore it instead of trying to clean every artifact. EnterProtect recovery gets a client running again. This matters after a lure, not before. Backup and recovery do not stop the lure from working. They help you respond when it does.
What MSPs Should Do
The sources do not provide a list of actions for MSPs. The following steps are standard practice for lookalike domain and ClickFix threats.
- Train users not to paste commands from a web page into a run dialog, terminal, or PowerShell window. No legitimate AI tool asks for that to verify you are human.
- Verify the domain before entering credentials or downloading anything. Bookmark the real AI tool and use that bookmark.
- Block known malicious domains at your DNS filter or secure web gateway. Use threat intelligence feeds that include lookalike domains.
- Audit browser extensions on client machines. Remove any extension that changes search settings or redirects searches.
- Keep endpoint protection and browser patches up to date.
- Maintain clean, restorable backups of client systems and data.
- Test your recovery process so you can restore a hijacked machine quickly.
- Document the scope of any incident and report it to the client.
How EnterProtect Helps
EnterProtect backup keeps clean, restorable copies of client data and systems. If a client machine is compromised by malware delivered through a lookalike domain, you can restore it to a known good state. EnterProtect recovery gets a client running again after an incident, reducing downtime and the cost of cleanup.
These are general capabilities. EnterProtect backup and recovery do not detect, block, or prevent ClickFix lures, browser-hijacking malware, or search-hijacking extensions. They help you respond after an infection.
Frequently Asked Questions
What Is TypoPrompting?
TypoPrompting is a codename from Island for a delivery pattern that uses lookalike domains for AI tools. The domains turn an attempt to reach a familiar AI tool into a prompt to verify. Hackernews reported that Island gave the pattern this name. The name combines typo-squatting with the prompt that appears.
What Is a ClickFix Lure?
A ClickFix lure is a fake verification prompt on a web page. It tells the visitor to paste a command into a run dialog or terminal to prove they are human. That command downloads and runs malware. In general, no legitimate service asks you to paste a command to verify you are human.
How Can I Tell If an AI Tool Domain Is Fake?
Check the domain spelling carefully. Lookalike domains often use small changes like an extra letter or a different top-level domain. Use a bookmark for the real AI tool instead of searching each time. If you see a verification prompt that asks you to run a command, close the page.
What Should an MSP Do If a Client Clicked a ClickFix Lure?
Disconnect the machine from the network if you suspect malware. Run a full endpoint scan and review browser extensions. Restore from a clean backup if the machine is compromised. Document what happened and inform the client.
Are the 186 Fake AI Domains Still Active?
The sources do not say whether the domains are still active. Hackernews reported that researchers found them. The story does not give a takedown date or current status. Treat the lookalike domain risk as ongoing.
Do These Attacks Exploit a Vulnerability in AI Tools?
No. The sources describe lookalike domains, not a software vulnerability in any AI tool. There is no CVE. The attack relies on a user visiting a fake domain and following a prompt. That makes user training and domain verification important.
Sources
- 186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers (Hackernews)