Haiou Codex jailbreak toolkit found injecting adverts into AI responses
AI SECURITYCheck Pointredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
A Chinese-language tool that claims to unlock OpenAI's Codex coding assistant also secretly changes its instructions so that simple greetings trigger an advert for a paid AI service. Researchers found it on a misconfigured server used by a threat actor, but found no evidence that its author was involved in cybercrime.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Review prompt instruction files, installed skills and gateway settings before trusting any Codex enhancement bundle.
- If Haiou is installed, use its included uninstaller, which restores original configurations and removes the advertisement.
- Treat readable instructions in third-party AI tool packages as configuration that needs review, not harmless text.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Malware
Companies