Evidence · DiggingBeagle record
Beware of Agentic Botnets: Scalable Untargeted Promptware Attacks via Universal and Transferable Adversarial HalluSquatting
A July 2026 arXiv paper introduces adversarial HalluSquatting: estimating likely hallucinated repository or skill identifiers, pre-registering them, and hosting adversarial instructions at those locations. The authors report hallucinated-resource generation up to 85% in repository-cloning scenarios and up to 100% in skill-installation scenarios, and demonstrate remote tool execution and remote code execution against production LLM applications with integrated terminals. These are controlled research demonstrations, not evidence of an in-the-wild botnet.
- Published
- Jul 8, 2026
- Publisher
- arXiv
Evidence record
A July 2026 arXiv paper introduces adversarial HalluSquatting: estimating likely hallucinated repository or skill identifiers, pre-registering them, and hosting adversarial instructions at those locations. The authors report hallucinated-resource generation up to 85% in repository-cloning scenarios and up to 100% in skill-installation scenarios, and demonstrate remote tool execution and remote code execution against production LLM applications with integrated terminals. These are controlled research demonstrations, not evidence of an in-the-wild botnet.