Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches.

This delivery pattern has been codenamed TypoPrompting by Island.

“AI-app lookalikes that turn an attempt to reach a familiar tool into a prompt to verify,