blackhatnews.tokyo • 18h
GhostJacking: Exploiting WebAI and Autonomous AI Agents
GhostJacking is a systemic exploitation technique targeting autonomous AI agents with WebAI integrations. By leveraging indirect prompt injection via malicious web content, attackers manipulate an agent's autonomous feedback loop to hijack its execution flow. This allows the attacker to abuse the agent's tool-calling capabilities (function calling) to execute arbitrary shell commands on host developer machines, exfiltrate sensitive API keys, and facilitate lateral movement. Effectively, this converts trusted productivity agents into LLM-orchestrated Remote Access Trojans (RATs), bypassing traditional input filters by poisoning the external data the agent consumes during autonomous browsing.