2024-09 · 2024-Q3
ChatGPT "SpAIware" Persistent Memory Exploitation
Who actually said "do this"?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
OpenAI ChatGPT macOS app
Impact
Persistent spyware in ChatGPT's long-term memory; continuous data exfiltration across all future sessions
Root cause
Memory feature allowed prompt injection from untrusted data to create persistent exfiltration instructions
Sources
Catalog
Cite this: AgentProv incident record: ChatGPT "SpAIware" Persistent Memory Exploitation (2024-09). https://agentprov.com/incidents/2024-09-chatgpt-spaiware-persistent-memory-exploitation
Related
- Also L2 · 2026-10-15Datadog: Counterfeit Policy Text Collapses an Injection Classifier's Recall and Pushes a LangChain Risk Gate Under Its Block ThresholdL2Instruction
- Also L2 · 2026-10-08Cisco Talos: Four Malware Families Carry Instructions Aimed at the LLMs That Triage ThemL2Instruction
- Also L2 · 2026-10-07Barracuda: Phishing Emails Carry Hidden Prompt Injections for the Recipient's AI Inbox AssistantL2Instruction