NewsThe Hacker News12.11.2026SME

186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers

Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches. This delivery pattern has been codenamed TypoPrompting by Island. "AI-app lookalikes that turn an attempt to reach a familiar tool into a prompt to verify,

Other advisories

Highosv:MAL-2026-17692Malicious code in clickfix_npm_delivery (npm)
Not ratedncscnz:compromised-websites-serving-clickfix-pagesCompromised Websites Serving ClickFix Pages
Not ratedsingcert:al-2025-068Ongoing ClickFix Campaign

Other news entries

Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)NewsSANS ISC Diary13.11.2026
Yet Another ClickFix Campaign, (Wed, Oct 28th)NewsSANS ISC Diary28.10.2026
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacksNewsBleepingComputer21.10.2026
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP ConnectionsNewsSecurityWeek21.10.2026
ClickFix has never been bigger, and AI tools are its most convincing lure yetNewsBleepingComputer21.10.2026
Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious CommandsNewsThe Hacker News21.10.2026
Decades-Old Windows Utility Powers Modern ClickFix AttackNewsDark Reading21.10.2026
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access TrojanNewsThe Hacker News20.10.2026

Source: https://thehackernews.com/2026/11/186-fake-ai-domains-redirect-users-to.html

More on ClickFix

Other advisories

Other news entries