Skip to content
securitytabs

AgentHopper: An AI Virus

MentionsAmazon Web ServicesGitHub

As part of the Month of AI Bugs, serious vulnerabilities that allow remote code execution via indirect prompt injection were discovered. There was a period of a few weeks where multiple arbitrary code execution vulnerabilities existed in popular agents, like GitHub Copilot, Amazon Q, AWS Kiro,… During that time I was wondering if it would be possible to write an AI virus. Hence the idea of AgentHopper was born.

Summary from Embrace The Red.

Explained

The technology and terms in this story. Learn more

More in AppSec