ZombAIs: Claude Computer Use Prompt Injection to C2
Date: 2024-10
Affected: Anthropic Claude Computer Use
Attack vector: rce
Category: research
Severity: Critical

Johann Rehberger demonstrated using prompt injection against Anthropic's Claude Computer Use feature to download the Sliver C2 binary, chmod +x it, and execute it - giving attackers full command and control.


Mitigations:

Architectural layers (MAESTRO):