Attack Steals Grok Chat Data via Web Pages

Adversa AI disclosed an attack that makes xAI's Grok chatbot send a user's name, location, subscription tier, and conversation prompts to an attacker-controlled server after summarizing a web page. The technique, "Cryptographic Context Injection," was reproduced on Grok 4.5 Fast at grok.com with a 40% success rate across 20 attempts since June.