Palo Alto Unit 42 "Phantom Squatting" - AI-Hallucinated Domains as an Attack Surface

913 global brands analyzed; AI agents and users that trust LLM-generated URLs

From 685,339 adversarial prompts, Unit 42 collected 2.1 million unique URLs and identified roughly 250,000 unregistered "phantom" domains that adversaries can register, plus 13,229 URLs already flagged malicious. Documented real abuse includes a "Montana Empire" phishing kit on a hallucinated postal-service domain (registered about 23 days after the model predicted it) and a malicious Android APK hosted on another phantom domain

Structural LLM hallucination of non-existent but plausible domains ("zero-reputation bypass"); described as inherently hard to patch because it stems from model behavior rather than a software flaw