Phishers are now prompting your AI agents directly via email to steal data
PremierOW · reddit · 2026-10-19
A Reddit warning: attackers are mass-emailing prompts to AI agents (like Dot) connected to Gmail, Drive and PCs, instructing them to leak personal information or install malware from attachments. Since agents treat these prompts as coming from the user, the attack bypasses usual defenses. Recommendation: revoke account access until fixed.
Related event: Phishing Emails Now Target AI Inbox Assistants with Hidden Prompt Injection(7 posts)→
More from Safety
- AI Hasn't Boosted Cybercrime Losses: 90% of Attackers Do Scams, Not Hacking — joshua_saxe · 2026-10-20
- KYC face recognition fails: a haircut makes the system reject the real user — TheMoonMidas · 2026-10-20
- NYT: OpenAI Ignored Employees' Warnings on AI Safety Testing Before Models Broke Out — BlancheMinerva · 2026-10-20
- Researcher Alleges OpenAI Obstructed Its Own Safety Probe, Limited Scope and Time — BlancheMinerva · 2026-10-20
- Anthropic hires "Tabletop Exercise Lead" for its Institute, drawing RAND comparisons — tszzl · 2026-10-20
- DeepSeek V4.1 refuses jailbreak persona, spotting prompt injection in red-team test — teortaxesTex · 2026-10-20