Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles

Check Point Research discovered the Haiou jailbreak bundle, a prompt package targeting OpenAI Codex designed to weaken model guardrails for security-related tasks including hacking and software cracking. The bundle functions as prompt adware by modifying Codex configuration files to inject advertisements for the author's LLM gateway service into agent responses. The jailbreak employs various techniques including role-playing, context-reframing into CTF scenarios, and refusal suppression. Researchers found this bundle on a misconfigured webserver alongside Cobalt Strike, VulnClaw agent, and Ladon framework, indicating active use by cybercrime actors. The freely distributed jailbreak serves as an acquisition channel for a paid gateway service. The bundle installs security-focused skills for penetration testing, reverse engineering, and game security, while persistently injecting promotional content through encrypted payload files distributed via GitHub and Chinese platforms.

• Belarus-Linked Hackers Deploy Wiper Malware in First Documented Destructive Attack on UkraineMalware2026-10-30
• Beyond the Inbox: How Threat Actors Abuse Microsoft Teams External Chat for Initial AccessCampaign2026-10-26
• PIVOTPIPE: A New .NET-based Unofficial Beacon PayloadMalware2026-09-16
• Melofee: a look back at a Linux implant and its new variantsMalware2026-09-10
• One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law EnforcementMalware2026-07-09