A newly named phishing tactic turns hallucinated URLs into real infrastructure, giving criminals a fresh path to impersonate brands and stage malware delivery.