Hackers Use OpenAI Codex Jailbreak Toolkit That Secretly Injects Ads Into AI Responses

Prompt Adware: How Hidden AI Instructions Could Create a New Enterprise Security Risk - Business News Week

By Pedro Drimel Neto, Check Point Research Check Point Research (CPR) discovered Haiou, an OpenAI Codex jailbreak bundle that persistently modifies an AI agent’s trusted instructions to inject advertisements for a third-party AI gateway. CPR calls this behavior “prompt adware,” highlighting how natural-language prompts and configuration files can quietly influence an AI agent’s future behavior without […] The post Prompt Adware: How Hidden AI In…

Hackers Use OpenAI Codex Jailbreak Toolkit That Secretly Injects Ads Into AI Responses

A jailbreak toolkit targeting OpenAI Codex is doing more than trying to bypass AI safety rules. The Chinese-language package, called Haiou, changes the coding agent’s trusted instructions so that ordinary greetings trigger advertisements for a third-party AI gateway. Researchers describe the behavior as prompt adware because it persists through written instructions rather than a conventional […]

Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles

Key Points Check Point Research analyzed the Haiou jailbreak bundle, a prompt package targeting OpenAI Codex. Such jailbreaks are designed to weaken model guardrails and enable tasks related to hacking, software cracking, and information security. The analyzed bundle can be classified as prompt adware. It installs security-focused Skills and modifies Codex’ configuration files so that

Prompt Adware: How Hidden AI Instructions Could Create a New Enterprise Security Risk

Check Point Research (CPR) discovered Haiou, an OpenAI Codex jailbreak bundle that persistently modifies an AI agent’s trusted instructions to inject advertisements for a third-party AI gateway. CPR calls this behavior “prompt adware,” highlighting how natural-language prompts and configuration files can quietly influence an AI agent’s future behavior without traditional executable code. While the advertisement itself is relatively simple, the t…