Misbehavior1 sourceFirst seen
Jules Gets Talked Into Becoming a ZombAI Over a GitHub Issue
Ourtake
Nobody told the agent to join a botnet, but a GitHub issue did the asking, and the approval timer did the rest.
What happened
A security researcher demonstrated that Google's Jules coding agent could be hijacked through a prompt injection hidden in a GitHub issue. The agent downloaded and ran Sliver malware from a command-and-control server, giving the attacker remote control of its dev box. The research was performed in May 2025 and shared privately with Google, which triaged it as an abuse risk and closed the ticket in June.