Haiou
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Recent news
AI jailbreak bundle Haiou alters OpenAI Codex prompts to advertise a commercial service
Researchers have identified Haiou, a Chinese-language AI jailbreak bundle that repeatedly modifies OpenAI Codex instructions to promote its author's commercial service. It was discovered on a cybercrime actor's misconfigured web server alongside Cobalt Strike and penetration testing utilities. The investigation, published November 3, describes the technique as a new form of prompt adware.
Haiou Codex jailbreak toolkit found injecting adverts into AI responses
Check Point researchers describe Haiou, a jailbreak package for OpenAI Codex that plants persistent advertising instructions in the agent's trusted prompts. Triggered by specific greetings or activation words, the agent returns a fixed promotion for an OpenAI-compatible AI gateway, which Check Point found no sign was malicious. The package was found on an exposed Cobalt Strike server in a November 3 technical report, and it ships encrypted content plus six security-related skills.
Check Point finds jailbreak bundle for Codex that injects adverts into agent files
Check Point Research analysed the Haiou jailbreak bundle for OpenAI Codex, which uses prompt injection and role-play to bypass guardrails and installs security-focused skills. The package also modifies Codex configuration files to inject adverts for an OpenAI-compatible LLM gateway into later responses, which the researchers classify as prompt adware. A threat actor running Cobalt Strike was found using the bundle alongside Ladon and VulnClaw.