New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

Researchers at Adversa AI discovered a cryptographic context injection attack (a technique that hides malicious instructions in encrypted code) that could trick xAI's Grok chatbot into sending sensitive user data like names, locations, and chat history to an attacker's server when the user asks it to summarize a web page. The attack works by embedding encrypted instructions in a webpage that Grok decrypts and executes, bypassing content filters that can't read encrypted text, then uses Grok's built-in tools to send the stolen data without asking the user first.