Netskope Threat Labs

BROWSER-OTHER Hidden Web Prompt Injection with destructive system wipe payload detected

IPS-CFWIPS-SWG

2 SIDs: 170303, 200356

First seen
May 2026
Last seen
October 2026

Detects web pages carrying hidden prompt injection text that instructs AI agents to disregard their system instructions and run destructive commands, such as recursive deletion, or raw disk writes. The rule complements endpoint controls for AI agents, since a browsing agent that follows the embedded instruction could wipe the system it runs on.