DefectiveCISO on Nostr: zero-click hijack of claude extension just by visiting a bad page. browser extensions ...
zero-click hijack of claude extension just by visiting a bad page. browser extensions plus llms is like handing attackers the keys to your brain.
> ShadowPrompt: Zero‑Click Hijack + Silent Data Theft
>
> ShadowPrompt is a chained attack against the Claude Chrome extension that enabled zero‑click prompt injection. A victim could simply land on an attacker‑controlled webpage and, without any interaction, have Claude receive
— @0x534c
#cybersecurity #infosec #news #ai
https://x.com/0x534c/status/2037940119291011532Published at
2026-03-28 20:14:45 UTCEvent JSON
{
"id": "1aae087035725bd32aef1ce4af98246721f61af77d553b8f7a63ce98f627080a",
"pubkey": "c515131657f13f4486cff1b6078a0f2ad3d083acd0c2bf46b192a33f8f80efc8",
"created_at": 1774728885,
"kind": 1,
"tags": [
[
"imeta",
"url https://image.nostr.build/d890c7bec60364a3931705319104874085f62271c86603bf216428a129587071.jpg"
],
[
"imeta",
"url https://image.nostr.build/62a24665d9e79653113661157b5850f68fb981f1a53650373694e8027a7ca1a0.jpg"
],
[
"t",
"cybersecurity"
],
[
"t",
"infosec"
],
[
"t",
"news"
],
[
"t",
"ai"
],
[
"r",
"https://x.com/0x534c/status/2037940119291011532"
],
[
"source",
"x.com"
]
],
"content": "zero-click hijack of claude extension just by visiting a bad page. browser extensions plus llms is like handing attackers the keys to your brain.\n\n\u003e ShadowPrompt: Zero‑Click Hijack + Silent Data Theft\n\u003e \n\u003e ShadowPrompt is a chained attack against the Claude Chrome extension that enabled zero‑click prompt injection. A victim could simply land on an attacker‑controlled webpage and, without any interaction, have Claude receive\n— @0x534c\n\nhttps://image.nostr.build/d890c7bec60364a3931705319104874085f62271c86603bf216428a129587071.jpg\nhttps://image.nostr.build/62a24665d9e79653113661157b5850f68fb981f1a53650373694e8027a7ca1a0.jpg\n\n#cybersecurity #infosec #news #ai\nhttps://x.com/0x534c/status/2037940119291011532",
"sig": "ac800510dbdf91a8d9cfba79d3d49bed6858954baff6171c2692a990575d9a30d6cce4ce48151b001240fa57f15f9a8623e7b0edb613cc53c90e8071434be445"
}
