'HalluSquatting': Researchers Weaponize 9 Popular AI Tools to Assemble Botnets

Ars Technica·high signal

Ars Technica reports a new class of attack that weaponizes LLMs' inability to say 'I don't know' — dubbed HalluSquatting — using nine of the most popular AI tools to assemble massive botnets. The technique exploits hallucinated package/resource names that attackers then register, turning agent confidence into a distribution vector. It's a concrete supply-chain-adjacent risk for anyone wiring LLMs into automated toolchains.