Google Gemini flaw hijacks email summaries for phishing
Bill Toulas
July 13, 2025
10:38 AM
2
Google Gemini for Workspace can be exploited to generate email summaries that appear legitimate but include malicious instructions or warnings that direct users to phishing sites without using attachments or direct links.
Such an attack leverages indirect prompt injections that are hidden inside an email and obeyed by Gemini when generating the message summary.
Despite similar prompt attacks being report...
