Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector
Summary: Unit 42 researchers found that large language models consistently hallucinate web domains for legitimate brands, and adversaries are registering those nonexistent domains to intercept traffic from AI systems, a pattern they call phantom squatting. Analyzing 913 global brands and executing 685,339 URL queries across two LLM models produced 2.1 million URLs, over 13,229 confirmed malicious URLs, and roughly 250,000 hallucinated domains that remain unregistered.
What you should know: Unit 42 predicted adversary registration of high-priority hallucinated domains 18 to 51 days ahead, and one attacker used an AI coding assistant to build a phishing kit named Montana Empire against a domain flagged 23 days earlier. A newly registered phantom domain carries no blocklist entry, threat intelligence history or reputation score, so it passes conventional URL defenses at the moment it is weaponized.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026