src_c25d91fa3ad9ae9ac7
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Aug 09, 2025 10:00 UTC
- Retrieved
- Oct 08, 2026 03:44 UTC
OpenHands and the Lethal Trifecta: How Prompt Injection Can Leak Access Tokens
Another day, another AI data exfiltration exploit. Today we talk about OpenHands, formerly referred to as OpenDevin. It’s created by All-Hands AI. The OpenHands agent renders images in chat, which enables zero-click data exfiltration. Simon Willison recently gave this data exfiltration attack pattern a great name: Lethal Trifecta. We discuss this specific image based attack technique frequently. S
Reference details
- Source category
- Research & news
- Report title
OpenHands and the Lethal Trifecta: How Prompt Injection Can Leak Access Tokens- First reported
- Aug 09, 2025 10:00 UTC
- Last reported
- Aug 09, 2025 10:00 UTC
- Catalog updated
- Oct 08, 2026 03:44 UTC
- Record ID
d938740de1728b90a7a900bc5915e157ec0ec4669a445286b42c73c69f09f831
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Review source update dates and status
- src_c25d91fa3ad9ae9ac7Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.