AI Assistant Nearly Forwarded Bank Statement via Hidden Email Prompt Injection
BusApprehensive6142 · reddit · 2026-08-07
A Reddit user shared a frightening experience where their AI assistant, which had access to their email and calendar, almost automatically forwarded financial documents to a stranger.
The attack came from a seemingly normal spam email containing hidden HTML instructions (a prompt injection attack) commanding the AI to find financial files and send them to an external address. The user caught the action mid-execution only because they had a confirmation step enabled. The author warns that any AI agent with account access is vulnerable to this threat and advises users to test their agents against malicious inputs.
More from coding & agent
- Opus 5.5 + Three.js demo stuns with water physics, fish and blossoms — nikola_mr64990 · 2026-10-16
- Grok-built linear regression bot claims $508K PnL in 125 days on Polymarket — Roger_M_Taylor · 2026-10-16
- Karpathy's knowledge engine workflow: Claude Code turns raw notes into a self-updating wiki — nikola_mr64990 · 2026-10-16
- Sierra and Meta unveil Personal Agent Protocol with Zapier as launch partner — sujingshen · 2026-10-16
- ArcKit adds 102 AI-narrated short films for commands across 14 community overlays — mcraddock · 2026-10-16
- Personal agents live or die on chaining tasks, not single-task ability — sujingshen · 2026-10-16