Researchers Trick Perplexity’s Comet AI Browser Into Phishing Scam in Under Four Minutes
Agentic web browsers could be programmed to fall for phishing and scam traps by using artificial intelligence (AI) capabilities to carry out actions across several websites on behalf of a user.
According to a paper Guardio shared with The Hacker News prior to publication, the attack essentially exploits AI browsers' propensity to rationalize their behavior and use it against the model itself to decrease its security barriers.
These days, the AI works in real time within chaotic and dynamic pages, constantly seeking information, making choices, and explaining its actions as it goes. "Narrating" is an understatement, according to security researcher Shaked Chen. "It blabbers, and way too much."
This is what we refer to as "agentic blabbering," where the AI browser reveals what it s...