Hackers can use 9 of the most popular AI tools to assemble massive botnets

Researchers have developed a new pull-based prompt injection attack called HalluSquatting, which can exploit nine popular AI coding tools to create massive botnets and perform large-scale DDoS attacks. This method leverages an LLM's tendency to hallucinate resource identifiers, allowing attackers to infect numerous devices indiscriminately by registering and seeding predicted identifiers with malicious instructions. This marks a significant advancement in prompt injection attacks, enabling widespread compromise with minimal effort.