Researchers discovered two websites leveraging indirect prompt injections to attempt to manipulate AI agents into cryptocurrency payments and context poisoning, Zscaler reported last week.  Indirect prompt injections involve planting malicious instructions into third-party data sources that enter an AI model’s context window, such as websites or emails, as opposed to direct prompt injections that are sent to the model through a chatbot’s interface, for example.As users increasingly use AI agents, rather than simple chatbots, to explore the internet, connect to other tools and applications and take actions on behalf of the user, threat actors are utilizing websites boosted with search engine optimization (SEO) poisoning to…