Phishing Emails Now Phish the AI Reading Your Inbox Too
Ourtake
The inbox summarizer is now a target, and it will happily tell you whatever the email writer told it to.
What happened
Barracuda reported a phishing campaign that combined a password-protected attachment lure with hidden prompt injections aimed at AI assistants that summarize inboxes. The injections could make an assistant present the email as urgent or request a wire transfer. Barracuda did not say how widespread the campaign was.