Data Exfiltration

Data Exfiltration from Writer.com via Indirect Prompt Injection

PromptArmor and Kai Greshake demonstrate data exfiltration from Writer.com via indirect prompt injection — where malicious content in a document the AI assistant processes causes it to leak user data. A concrete case study of the class of attack affecting all document-processing LLM applications.