Victims didn’t have to click anything and were not even aware they’d been hacked.

Unlike most prompt injections, ShadowLeak executes on OpenAI's cloud-based infrastructure.

Victims didn’t have to click anything and were not even aware they’d been hacked.