AML.T0060
Publish Hallucinated Entities
Description
Adversaries may create an entity they control, such as a software package, website, or email address corresponding to a source hallucinated by an LLM. The hallucinations may take the form of package names, commands, URLs, company names, or email addresses that point the victim to the entity controlled by the adversary. When the victim interacts with the adversary-controlled entity, the attack can proceed.
Honesty-tier rationale
Attacker preparation (infrastructure, accounts, publishing poisoned models/data). Actually producing poisoned artifacts is exactly what an educational site must not do — delivered as an explainer.