Advanced Data Exfiltration Techniques with ChatGPT

During an Indirect Prompt Injection Attack an adversary can exfiltrate chat data from a user by instructing ChatGPT to render images and append information to the URL (Image Markdown Injection), or by tricking a user to click a hyperlink.
Sending large amounts of data to a third party server via URLs might seem inconvenient or limiting…
Let’s say we want something more, aehm, powerful, elegant and exciting.
ChatGPT Plugins and Exfiltration Limitations Plugins are an extension mechanism with little security …

advanced adversary attack chat chatgpt click data data exfiltration exfiltration image images information injection injection attack large party prompt injection server techniques third url urls