Data Exfiltration via Markdown Images in Chatbots
Validated facts
If a chatbot is manipulated through prompt injection, it can encode sensitive data in the link of an invisible image (``). When the chat reply is rendered, the browser loads the image and steals the data.
In plain language
The secret postcard: The AI writes you a normal reply but sticks an invisible stamp on the back that sends your password to the attacker.
Security relevance & practical tip
Chatbot UIs must strictly filter external image requests and HTML rendering.
Primary source / reference
- Embrace The Red Cyber Research