Event invitation prompt injection worm targets AI email assistants

Researchers discovered an indirect prompt injection worm hidden inside a legitimate event invitation designed to exploit AI email assistants. The malicious instructions tell the assistant to forward the message to coworkers on the same domain and search the mailbox for cryptocurrency wallet seed phrases. The attack bypasses standard link scanning and attachment checks because the payload consists entirely of hidden text meant solely for the machine. Open article →