Typosquatting Is No Longer a User Problem. It's a Supply Chain Problem

This article highlights a significant shift in cyberattack tactics, moving away from traditional phishing and towards a supply chain attack leveraging AI-generated lookalike domains and compromised third-party scripts. The Trust Wallet attack, involving a self-replicating npm worm named Shai-Hulud, demonstrated how attackers can silently modify trusted browser extensions to steal sensitive data without triggering conventional security alerts. The core issue is that existing security tools lack visibility into the runtime behavior of scripts executed within web browsers, creating a vulnerability that’s being exploited at scale due to the speed and efficiency of AI-powered domain generation.