HalluSquatting

HalluSquatting is a cybersecurity attack method where AI tools are tricked into downloading malicious software by exploiting their tendency to hallucinate fake repository names. Attackers register these hallucinated names as real repositories to deliver malware, potentially stealing data or recruiting devices into botnets. Researchers from Tel Aviv University, Technion, and Intuit demonstrated the technique against AI coding tools and personal assistants.