Key Points Check Point Research analyzed the Haiou jailbreak bundle, a prompt package targeting OpenAI Codex. Such jailbreaks are designed to weaken model guardrails and enable tasks related to hacking, software cracking, and information security. The analyzed bundle can be classified as prompt adware . It installs security-focused Skills and modifies Codex’ configuration files so that advertisements for the jailbreak’s author’s website are injected into subsequent agent responses. The advertised service is an opaque, OpenAI-compatible LLM gateway, a middleware between an application and an LLM provider. The likely business model is to use the freely distributed jailbreak bundle as an acquisition channel for the paid gateway service. We observed the jailbreak being used by a cybercrime…