Loading malware…
4 distinct techniques documented for this family, organized by ATT&CK tactic.
The attacker does not need your password or your account. They send an email to someone whose agent is set up to check their inbox, which, for these assistants, is a routine job.
The agent uses its own file tools to write the attacker's false note into its persistent memory.
The agent uses its own file tools to write the attacker's false note into its persistent memory.
Its visible reply says nothing about having done so. ... The assistant hides its behind-the-scenes steps by design, so the moment it edits a file never shows up in the chat.
To make the poison stick, the tool aims it at the core files that load every session, so a single write is loaded into every later session instead of waiting to be pulled from a separate memory store.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.