VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_7479cc50fb44aa114a0d8295a37dd52b

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

Published Jul 1, 2026

Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone else can, then hosting phishing pages on them to catch traffic that AI tools point their way.

Palo Alto Networks' Unit 42 calls the trick phantom squatting, and its new research shows it is already happening in the wild.

The reason it matters is

Affected AI Products

large language model
Get the weekly digest. Every Monday: top AI security stories of the week. Free.