hendryadrian.com
Indirect Prompt Injection in Web Content Targets AI Agents
Zscaler ThreatLabz analyzed two indirect prompt injection campaigns that used hidden instructions, SEO poisoning, CSS, HTML, and JSON-LD to manipulate AI agents visiting malicious websites. The campaigns impersonated a fake payment/API-key site and a typosquatting DeBank clone, and testing across 26 LLMs showed several models could be tricked into misclassification or unauthorized payment actions. #Zscaler #ThreatLabz #DeBank #Open-Agent-Utilities