Jules Zombie Agent: From Prompt Injection to Remote Control

<a id="top_ref"></a>

<p>In the <a href="https://embracethered.com/blog/posts/2025/google-jules-vulnerable-to-data-exfiltration-issues/">previous post</a>, we explored two data exfiltration vectors that Jules is vulnerable to and that can be exploited via prompt injection. This post takes it further by demonstrating how Jules can be convinced to download malware and join a remote command &amp; con