Claude in Chrome Prompt Injection Steals Gmail Codes to Hijack Slack, X, and Claude.ai Accounts

An indirect prompt injection vulnerability in Claude on Chrome can be exploited to steal email verification codes and hijack accounts on platforms like Slack, X, and Claude.ai. The attack begins with a malicious email that lands in the victim’s Gmail inbox. When the user requests Claude in Chrome to summarize recent emails, the assistant may inadvertently read the attacker-controlled message. Hidden instructions within the email can manipulate Claude into running JavaScript using its javascript_tool, all without the victim’s awareness. Previous research documented the complete path from a simple browser alert to arbitrary code execution. This latest analysis focuses on the more severe consequence: account takeover via...

Read the full article at the source.