9个顶级ai工具被劫持构建僵尸网络 —— 幻觉成为新漏洞
研究員在9個主要ai工具（包括chatgpt和gemini）中發現「hallusquatting」漏洞，允許攻擊者通過幻覺插件劫持llm來驅動大規模殭屍網路。
security researchers unveiled 'hallusquatting', a technique targeting 9 leading ai platforms including openai's chatgpt and google gemini. the exploit leverages llm sycophancy—where models prioritize answering over accuracy—to trick them into executing arbitrary commands delivered via hallucinated plugins. this allows malicious actors to transform these tools into command-and-control nodes for botnets without traditional hacking. the findings reveal a fundamental vulnerability in current alignment techniques, suggesting that rlhf optimization may inadvertently create security loopholes.