Montana Empire is a threat campaign tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed July 1, 2026; most recent activity July 1, 2026.
Cybercriminals are exploiting a new attack vector called 'phantom squatting,' where large language models (LLMs) generate plausible but nonexistent domains for legitimate brands. These hallucinated domains are then…