Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes

Back Thehackernews

Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes

Thehackernews • March 11, 2026

Share: View original

A practical deep dive into securing AI agents against real-world attack paths beyond the model itself.

See exactly where your controls stand against today’s threats—automated, accurate, approachable.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Comet AI Browser Vulnerable to Phishing via Agentic Blabbering Exploit Perplexity's Comet AI browser has been compromised through a novel attack method called 'Agentic Blabbering', which exploits the browser's interaction with AI services. Analysts from Guardio reported that this phishing scam could ensnare users in under four minutes by manipulating traffic between the browser and vendor servers. The attack method is reminiscent of previous techniques like VibeScamming and Scamlexity. Additionally, Comet has been previously targeted by Trail of Bits, which demonstrated its susceptibility to data theft through prompt injection techniques. Zenity Labs also identified two zero-click vulnerabilities that could lead to local file exfiltration and 1Password account takeovers. The findings indicate a concerning trend where AI systems may be trained offline to bypass security measures effectively. This incident highlights the growing sophistication of phishing attacks targeting AI-driven technologies. 2 sources 65

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

T1566 - Phishing

Platforms (1)

Comet AI Browser