Hackers can use 9 of the most popular AI tools to assemble massive botnets

2026-07-09

HalluSquatting is a prompt‑injection technique that abuses LLM coding agents' tendency to invent repository names, then register those hallucinated identifiers with code that installs reverse shells. The attack can quietly build large botnets or run ransomware and cryptomining by exploiting agents' high‑privilege terminals when they fetch trending repos or skills from registries.