Fake addresses for ChatGPT, Claude or Gemini are not just trying to attract visits. Some try to get a command executed, an application installed or an extension added. An analysis by Island describes these transitions from browsing to actions on the computer.
Similar addresses, different journeys
When searching for an artificial intelligence assistant, a transposed or missing letter can lead to a domain name imitating that of the intended service. This practice, called typosquatting, involves registering addresses similar to well-known brands or names. In its analysis, cybersecurity company Island says it identified 186 lookalike domains associated with 27 AI brands, including ChatGPT, Claude and Gemini.
These figures describe a set of observed domains, not 186 victims or 186 sites all leading to the same trap. The destination can vary depending on the country, operating system and browser. Some visitors may see only a parked page, whose owner may resell the traffic. Others may be redirected to a fake security check or an offer to install an extension.
ClickFix turns a fake check into a deliberate action
In the ClickFix scenario reported by Clubic, a page imitates a human verification or security screen. It tries to make people believe that an action is needed to continue. On Windows, the person is prompted to open the “Run” window and paste text into it; on Mac, the pretext may take the form of a fake update inviting them to use Terminal.
The name ClickFix highlights how the method works: visitors are led to launch a command themselves, presented as a repair or check. This is very different from a simple typo. Once executed, the command can trigger the download or launch of a malicious programme. The Singapore Cyber Security Agency’s advisory also describes this general approach: the attacker relies on people copying and running content presented as a quick fix, rather than on an attachment being opened inadvertently.
An unexpected request to open a system window and paste text into it is therefore a signal to stop. A genuine Cloudflare check, for example, does not ask you to run a command in “Run” or Terminal. Do not continue with a procedure of this kind just because the page uses the colours of a familiar service or displays a recognisable logo.
Installing an application or extension creates another risk
Not all fake addresses lead to ClickFix. Island also reports pages offering an application presented as a Wi-Fi analysis tool. According to its analysis, a package signed in the name of the Microsoft Store corresponds to the application published there, but it contains behaviour that hijacks the browser. The signature provides information about the package’s origin; analysing its behaviour is a separate check.
Installation can, in particular, change the default search engine or add extensions to the browser. Another variant described by Clubic offers an extension that routes searches through a third-party server. In a professional context, an address bar may contain the names of servers, clients or projects: what is entered is not necessarily an innocuous public search.
Good habits before and after clicking
To access an assistant you use regularly, the simplest option is to use a bookmark saved after checking the address, or the official application downloaded from its publisher’s website. If you are unsure about an address, do not continue to the page; return to a known access point. Be especially wary of instructions asking you to copy text into a system tool or install an extension to “check” your device.
If the browser’s search engine changes without reason, check its settings and the list of installed extensions. On a device managed by an organisation, report the change to the IT department before altering the configuration. Keeping systems and security protections up to date, and limiting the permissions granted to software, are also among the measures recommended by the CSA. They reduce some risks, without guaranteeing that no attack can succeed.
If a command has been executed or unknown software has been installed, do not follow any further instructions on the page. On a work device, contact the IT department promptly. For a personal device, use the security tools already installed or seek advice from a qualified professional.
References
- Clubic, “A typo while searching for ChatGPT or Gemini can lead you to a booby-trapped site”
- Island, “TypoPrompting: From AI Typos to Malware”
- Cyber Security Agency of Singapore, “Ongoing ClickFix Campaign”
Typing on a computer keyboard. Illustrative photo.
