Unverified50% confidenceFactExact time
Simon Willison documented an attack in which a researcher caused Claude's webfetch tool to leak user names and location information, with the attacker planting honeypot links in crawled pages to trick the tool into automatically exfiltrating data
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/10/2026
First Seen
Valid until: 1/8/2027
Sources
Related Entities
Related Claims
Unverified2023年研究人员Riley Goodside首次系统性演示了间接提示词注入的危害，同年慕尼黑工业大学团队发表论文证明可通过恶意网页劫持基于GPT-4的浏览器助手外传用户数据72% similarUnverifiedWhen Simon Willison included this article, he tagged it with: accidental-cyberattacks, ai-misuse, and ai-security-research.67% similarUnverified2023年研究人员Simon Willison系统性地揭示了间接提示注入的危害，指出模型具备联网搜索或文件读取能力时攻击面急剧扩大66% similarUnverifiedIn 2024, security researcher Johann Rehberger demonstrated an indirect prompt injection attack that successfully hijacked the output of multiple commercial RAG systems by embedding instruction text in public web pages that was invisible to humans but readable by AI62% similarUnverifiedSimon Willison published the tool on his personal site tools.simonwillison.net.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/993955API
curl https://kongchang.com/api/v1/knowledge/claims/993955MCP
get_claim(id=993955)