The Dark Side of LLMs: Agent-Based Attacks for Complete Computer Takeover
Date: 2025-07
Affected: 17 frontier LLMs in agent configurations
Attack vector: prompt-injection
Category: research
Severity: Critical

Lee et al. demonstrate that adversaries can chain direct prompt injection, RAG backdoor, and inter-agent trust exploitation to make computer-use agents autonomously install and execute malware. 82.4 percent of 17 LLMs vulnerable to inter-agent trust exploitation.


Mitigations:

Architectural layers (MAESTRO):