Unverified50% confidenceEventExact time
The entry point of the SalesBleed attack is the Web-to-Lead form; attackers embed prompt injection in form fields, and after the Agent reads the contaminated record it obtains other CRM data and exfiltrates it via image tags.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedIndirect injection refers to attackers hiding malicious instructions in external content that the model will read, such as webpage body text, email body text, or document content.72% similarVerifiedPrompt injection attacks induce AI agents to execute malicious operations by embedding text disguised as system instructions in code comments, documentation, web content, or even file names.71% similarVerifiedAttackers can induce agents to execute a sequence of seemingly normal operations—such as querying user data, calling formatting tools, and triggering email sending—to form a data exfiltration chain.71% similarUnverified攻击者利用AI幻觉出的包名，提前在npm、PyPI等包注册表抢注并植入恶意代码，这种攻击手法被称为slopsquatting70% similarUnverifiedAttackers can forge advertiser identities, or hide malicious code in third-party creatives, landing pages, or even the images or scripts used in ad creatives.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1044836API
curl https://kongchang.com/api/v1/knowledge/claims/1044836MCP
get_claim(id=1044836)