Research Team Identifies 'HalluSquatting' Hacking Technique Using AI Web Search

A new form of hacking that uses AI to spread malware has been identified. This attack exploits AI hallucinations that occur when users ask AI assistants to download software. Attackers trick the AI into finding fake projects, turning them into distribution paths for malicious files.

Researchers from Tel Aviv University, the Technion, and Intuit detailed this technique in a recent paper and conducted experiments targeting popular AI coding tools and personal assistants.

The study confirmed that this attack allows attackers to download files under their control and execute commands on the user's computer.