HalluSquatting Attack Exploits AI Coding Assistants to Deploy Botnet Malware

A new HalluSquatting attack exploits AI coding assistants' tendency to hallucinate project names, enabling attackers to install botnet malware by registering deceptive repositories. The method leverages AI prompt injection and predictable name generation to bypass security checks and execute malicious commands.

AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will sometimes hand back a real-sounding name for a project that does not exist.

New research, which its authors call HalluSquatting, turns that habit into an attack: work out the fake names an AI reliably invents, register them first, and wait for the assistant to fetch your trap on a user's

Read original article