X-squatter: AI Multilingual Generation of Cross-Language Sound-squatting

This article shows that sound-squatting is not just a theoretical trick. The authors use a multilingual AI generator to search for abuse in very large collections of TLS certificates and in PyPI package history, finding clear signs that the problem already appears in real infrastructure.

The result matters for phishing defence, brand-abuse monitoring, certificate analysis, and software supply-chain security. Its broader message is that attacks become easier to scale when language differences stop being a meaningful barrier.