Data Exfiltration via Markdown Images in Chatbots
Hechos validados
If a chatbot is manipulated through prompt injection, it can encode sensitive data in the link of an invisible image (``). When the chat reply is rendered, the browser loads the image and steals the data.
Explicación sencilla
The secret postcard: The AI writes you a normal reply but sticks an invisible stamp on the back that sends your password to the attacker.
Relevancia de seguridad y consejo práctico
Chatbot UIs must strictly filter external image requests and HTML rendering.
Fuente primaria / referencia
- Embrace The Red Cyber Research