The point: Ready-made IDPI tools are already being commercialized and sold underground – a sign that prompt-injection attacks could transition from pure theory to practical threat.
Proofpoint documents growing criminal interest in Indirect Prompt Injection (IDPI) and observes the first commercialized tools in the underground. The previous restraint shown by cybercriminals in AI attacks could be ending.
Security researchers at Proofpoint have identified several frameworks for automated prompt injection currently being sold in criminal forums. Subscriptions start at around $150 per month. Although the offerings are still in early stages, according to Proofpoint they are functional tools, not purely theoretical concepts.
Proofpoint categorizes four IDPI generator types: An IDPI email generator hides prompts as machine text (such as white text on white background) in messages and documents. An IDPI PDF generator embeds instructions in email attachments such as PDF or DOCX files, for example with the request to send specific files to external addresses. An IDPI calendar invitation generator places commands disguised as agenda items in the text of calendar invitations. An IDPI webpage generator is designed to embed instructions in dynamically loaded advertisements that AI agents process when scanning web pages.
To date, deliberately executed IDPI attacks are rare. Proofpoint suspects that cybercriminals have had no incentive to change their established methods as long as conventional attacks on individuals continue to be successful. A documented example from early 2026 by Unit 42 showed hidden prompts in the HTML code of a phishing page that caused AI ad review systems to approve malicious advertisements.
Security experts view an increase in IDPI attacks as a matter of time. Proofpoint warns IT security managers not to be lulled into a false sense of security and recommends preparing defense mechanisms against these attack vectors.
Source: www.it-daily.net · Published 28 July 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.