HalluSquatting Attack Exploits AI Coding Assistants to Deploy Botnet Malware

A new HalluSquatting attack exploits AI coding assistants' tendency to hallucinate package names, enabling attackers to register deceptive repositories that trick assistants into installing botnet malware. The method leverages AI-generated fake names, prompt injection, and unattended execution modes to compromise systems without traditional malware or network exploits.

AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will sometimes hand back a real-sounding name for a project that does not exist.

New research, which its authors call HalluSquatting, turns that habit into an attack: work out the fake names an AI reliably invents, register them first, and wait for the assistant to fetch your trap on a user's

Read original article