Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles

Summary

Check Point Research analyzed the Haiou jailbreak bundle, a Chinese-language prompt package targeting OpenAI Codex that weakens model guardrails for hacking-related tasks. The bundle installs security-focused Skills and modifies Codex configuration files so that advertisements for the author's paid, OpenAI-compatible LLM gateway are injected into subsequent agent responses, which Check Point classifies as prompt adware. Researchers also observed the bundle on a misconfigured webserver alongside Cobalt Strike, the Ladon framework and the VulnClaw agent, used by a cybercrime actor.

Topics

• Prompt injection and jailbreaks

Related items

• InfoChatGPT will now make you animated GIFsSame vendor · The Verge (AI)
• MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSame vendor · The Hacker News
• InfoForrester gave Endor Labs the highest score possible in seven criteria, including innovation, AI application flaws, AI SCA, and AI coding toolchain. | Endor LabsSame vendor · Endor Labs Blog
• InfoUber only fulfilled 4 rides from AI agents last quarterSame vendor · The Verge (AI)
• InfoSam Altman addresses RAM comments: People should ‘put as much as they want in their computers’Same vendor · The Verge (AI)