Unverified50% confidenceFactExact time
此类骗局邮件使用 AI 生成的头像和赞美文本、Gmail 账户，且很可能每次更换姓名，难以追溯
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/10/2026
First Seen
Valid until: 11/8/2026
Sources
Related Claims
Unverified2024年已出现实际案例：通过网页内容中的隐藏指令，攻击者成功操纵具有邮件发送权限的AI助手向外部地址转发敏感内容70% similarUnverifiedSensitive user information accumulated in noreply mailboxes can support identity theft, account takeover, and even financial fraud.68% similarUnverifiedAfter connecting an AI assistant to their email and calendar, a Reddit user nearly had their bank statement forwarded to an unknown external address due to hidden AI-targeted instructions in the HTML code of an email; the action was intercepted midway because a confirmation step had been enabled.68% similarUnverifiedAttackers can bypass two-factor authentication by stealing session cookies to directly impersonate a user's identity.65% similarUnverified邮件转发中Received字段记录每一跳服务器信息，Return-Path字段存储退信地址，X-Forwarded-To等扩展头字段可能暴露真实收件人64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/723602API
curl https://kongchang.com/api/v1/knowledge/claims/723602MCP
get_claim(id=723602)