Grok exfiltrates user data when malicious instructions are encrypted
Ars Technica 1 month ago 32 ● 3 sources
Researchers reported a prompt-injection attack against Grok that caused it to exfiltrate user chats and personal information after malicious instructions were encrypted. The assistant was still outputting the stolen data even after xAI was told in June. The incident reinforces that LLMs don’t reliably fix the root cause, so developers rely on guardrails to block harmful actions rather than preventing the injection itself.