HalluSquatting

HalluSquatting: New AI Attack Leverages LLM Hallucinations for Scalable Exploits

Researchers have devised HalluSquatting, a novel pull-based AI attack that exploits LLM hallucinations of resource identifiers to create massive botnets, conduct large-scale DDoS attacks, and infect devices. The attack targets AI coding assistants and agents by registering predicted hallucinated identifiers with malicious code.