THREAT OPS › Threat News › CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower
CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower
<p>Varonis Threat Labs uncovered another one-click vulnerability in Microsoft Copilot Personal dubbed CoSnitch, which quietly executes an attack chain that exfiltrates data from enterprises without obvious red flags.</p> <p>What makes CoSnitch unique is how Copilot surfaced its own vulnerabilities, a method we are calling meta-hacking. Our researchers didn't have to reverse-engineer the flaw. Th
MITRE ATT&CK techniques
Indicators of compromise
- https://webhook.site/75aabb18-9bcf-4383-9e29-349fbc4c40e8/SUPPORTurl
- eo8el024afgbal3.m.pipedream.netdomain
- track.hubspot.comdomain
- 2fwww.varonis.comdomain
- 252fwww.varonis.comdomain
Original source: https://www.varonis.com/blog/cosnitch