Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

Cybersecurity researchers have identified a new threat called "phantom squatting," where attackers exploit AI-generated hallucinated domain names to launch phishing campaigns and distribute malware. When AI models like ChatGPT fabricate non-existent websites or resources in their responses, malicious actors can register these hallucinated domains and wait for unsuspecting users who trust the AI's recommendations to visit them. This emerging attack vector highlights a novel intersection between AI's tendency to generate false information and traditional cybersquatting tactics.