Zscaler finds prompt injection can trick AI agents into crypto payments

ThreatLabz documented two real world campaigns that hid instructions in web pages using SEO poisoning and off screen text, and in testing 4 of 26 models including versions of Llama and Gemini were manipulated into sending fraudulent cryptocurrency payments.