2024-08-08 · 2024-Q3
LOLCopilot - Black Hat USA 2024 Copilot Attacks
Who actually said "do this"?
- Fixable
- Architectural
- Vendor response
- Unknown
- In the wild
- No
- Actor
- Attacker
Target
Microsoft 365 Copilot
Impact
Hidden email code injection, plugin exploitation, data exfiltration through default Copilot access; no user interaction required
Root cause
Default configurations grant broad access to emails/docs; indirect prompt injection via invisible email tags
Sources
Catalog
Cite this: AgentProv incident record: LOLCopilot - Black Hat USA 2024 Copilot Attacks (2024-08-08). https://agentprov.com/incidents/2024-08-08-lolcopilot-black-hat-usa-2024-copilot-attacks
Related
- Also L2 · 2026-10-15Datadog: Counterfeit Policy Text Collapses an Injection Classifier's Recall and Pushes a LangChain Risk Gate Under Its Block ThresholdL2Instruction
- Also L2 · 2026-10-08Cisco Talos: Four Malware Families Carry Instructions Aimed at the LLMs That Triage ThemL2Instruction
- Also L2 · 2026-10-07Barracuda: Phishing Emails Carry Hidden Prompt Injections for the Recipient's AI Inbox AssistantL2Instruction