AI Agent Clickbait

Adversaries may craft deceptive content designed to bait computer-using AI agents or AI web browsers and tools into taking unintended actions, such as clicking buttons, copying code, or navigating to specific web pages. These attacks exploit the agent's interpretation of UI content, visual cues, and natural language embedded in processed artifacts, such as a website or a document, and aim at the agent's decision process rather than a human reader's.

When successful, AI Agent Clickbait can lead the victim's agent to inadvertently copy and execute malicious code on the user's operating system or perform data exfiltration. The AI Agent Clickbait may also include a Prompt Injection: Indirect, which can influence or manipulate the victim's agent in adversary-controlled ways.