Researchers Trick AI Browsers Into Leaking Credentials

LayerX demonstrated a proof-of-concept attack named "BioShocking" that tricks AI-powered web browsers and browser extensions into believing they are playing a game, causing them to ignore safety rules and copy credentials from logged-in pages. Six agents (including ChatGPT Atlas, Perplexity Comet, and an Anthropic extension) were shown to exfiltrate SSH/login data during the test; vendors' responses varied and LayerX recommends user-confirmation and tighter context controls to prevent such exfiltration.