HashJack Attack Exploits AI Browsers and Assistants

Security researchers at Cato Networks have identified a new attack technique named HashJack, which targets AI browsers and agentic AI systems. This indirect prompt injection method allows attackers to manipulate these systems into delivering phishing links, sharing sensitive data, or providing misleading information. The attack leverages malicious instructions hidden in the #fragment of URLs that appear legitimate.