TLDR
Phishing emails are evolving. Attackers embed hidden prompt injection instructions aimed at AI assistants that summarize or triage your inbox. The visible message may look ordinary or even suspicious (a password protected attachment, a...
How it works
Phishing emails are evolving. Attackers embed hidden prompt injection instructions aimed at AI assistants that summarize or triage your inbox. The visible message may look ordinary or even suspicious (a password protected attachment, a...
Red flags
- Email with a password protected attachment where the password is supplied in the message body
- Hidden HTML comments, encoded blocks, or invisible styling inside otherwise empty looking messages
- AI assistant summary that urges payment changes, urgent replies, or sharing sensitive data without clear context
What to do
- 1Always open the original email before acting on any AI generated recommendation involving money or sensitive data
- 2Verify any payment or banking change through a separate, trusted channe
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/ai/2026/10/phishing-emails-are-baiting-your-ai-assistantFAQ
Is Phishing emails now hide instructions for your AI assistant a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Email with a password protected attachment where the password is supplied in the message body; Hidden HTML comments, encoded blocks, or invisible styling inside otherwise empty looking messages; AI assistant summary that urges payment changes, urgent replies, or sharing sensitive data without clear context
What should I do first?
Always open the original email before acting on any AI generated recommendation involving money or sensitive data; Verify any payment or banking change through a separate, trusted channe
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.