https://www.techradar.com/news/criminals-could-use-skill-squatting-to-hijack-your-smart-speaker

Researchers have demonstrated how crooks could use the idiosyncrasies of voice recognition to carry out unwanted commands on a smart speaker. 

A team from the University of Illinois showed that by giving a malicious application or Alexa skill a name that sounds the same as a legitimate one, criminals could trick a device into triggering it – a tactic it calls 'skill squatting'.