Indirect Prompt Injection in Web Content Targets AI Agents

Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments