Unit 42 Warns AI-Hallucinated Domains Are Becoming a Supply-Chain Attack Vector

Palo Alto Networks Unit 42 reported an active supply-chain threat dubbed phantom squatting, in which large language models generate plausible but nonexistent brand-related domains that attackers later register and weaponize. In a study covering 913 global brands, 685,339 prompts across two LLM families produced 2.1 million URLs; researchers found 13,229 already classified as malicious and roughly 250,000 unregistered hallucinated domains that could be claimed by adversaries. The report says the technique creates a new path for phishing, malware delivery, and brand impersonation by exploiting domains that appear credible because they are syntactically consistent with legitimate organizations.

Unit 42 said defenders observed multiple real-world cases in which hallucinated domains were identified 18 to 51 days before attackers registered them, including a Montana Empire phishing operation and a postal-themed malicious Android APK campaign. The researchers warned that phantom-squatted domains can evade traditional reputation-based URL defenses because newly registered domains start with no threat history, while trusted AI assistants and autonomous agents may surface or use those domains directly, increasing software supply-chain and user-targeting risk.