New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

Back Thehackernews

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

Thehackernews •[email protected] (The Hacker News) • July 8, 2026

Share: View original

Learn how to secure AI agents with practical controls for access, visibility, secrets, and risk containment.

Learn how to govern risk, secure AI-built software, and keep control as development moves at machine speed.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

HalluSquatting Attack Exploits AI Hallucinations to Create Botnets Researchers have identified a new attack vector called HalluSquatting, which exploits AI coding assistants' tendency to hallucinate non-existent software package names. Attackers can pre-register these names on platforms like GitHub and PyPI, creating malicious repositories that trick AI assistants into executing harmful payloads, such as botnet malware. This technique, termed 'adversarial hallucination squatting,' poses a significant risk to systems relying on AI for coding assistance. The research was conducted by a team from Tel Aviv University and Technion, highlighting the potential for large-scale botnet creation. The attack method raises serious concerns about the security of AI-driven software development tools. Current status indicates that the cybersecurity community is on alert for potential exploitation of this vulnerability. 19 sources 65

Extracted Entities

Attack Types (1)

Campaigns (1)

HalluSquatting Attack