Prompt injection attacks trick AI agents into making crypto payments

Two campaigns were uncovered using indirect prompt injection in malicious websites to exploit autonomous AI agents, tricking them into making cryptocurrency payments. The attacks target AI agents that browse the web without human oversight, highlighting risks of delegating financial transactions to AI.