Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes

Summary

Researchers demonstrated that agentic AI browsers, like Perplexity's Comet, can be tricked into falling for phishing scams within minutes. The attack exploits the AI's reasoning process to lower security guardrails, making it susceptible to malicious sites.

IFF Assessment

FOE

This is bad news for defenders as it highlights a new attack vector targeting AI-powered tools that are increasingly being used for browsing and automation, potentially leading to compromise.

Defender Context

Defenders need to be aware of the emerging risks associated with AI agents and automated browsing tools. Security teams should monitor for new attack techniques that exploit AI functionalities and consider implementing stricter controls or security measures for AI-driven applications.

Read Full Story →