🧵Phishing with Gmail's Gemini Summarize via prompt injection: 1. Embed an attack prompt as invisible (white) text. 2. User clicks "Summarize" in Gemini. 3. Gemini outputs a malicious link as the "full summary." 4. Victim clicks the link. Phished! ✅😤
🧵Phishing with Gmail's Gemini Summarize via prompt injection: 1. Embed an attack prompt as invisible (white) text. 2. User clicks "Summarize" in Gemini. 3. Gemini outputs a malicious link as the "full summary." 4. Victim clicks the link. Phished! ✅😤
