Topic · DiggingBeagle record
Phantom squatting: hallucinated domains as an agent-facing risk
Phantom squatting is a software-supply-chain risk in which an AI system hallucinates or invents a package/domain dependency and an attacker registers the nonexistent name so later automated consumers resolve to attacker-controlled infrastructure. The risk becomes more serious when agents can install dependencies or follow generated URLs without independent verification.
Definition & limits
Phantom squatting describes the risk that an AI system invents a plausible but nonexistent web domain and an attacker later registers that domain, turning a hallucinated destination into malicious infrastructure. The Unit 42 measurements support the threat model but do not prove deliberate anticipatory registration for every observed malicious-domain overlap.
Research using this topic (2)
Cite this record
DiggingBeagle. “Phantom squatting: hallucinated domains as an agent-facing risk.” https://diggingbeagle.com/concepts/phantom-squatting-hallucinated-domains-as-an-agent-facing-risk/