DuckDuckGo Search Assist Produced Fabricated Death Claims After Trickery
Attack on AI3 Confirmed exploitationPrompt injection
DuckDuckGo Search Assist generated false claims about public figures after being manipulated by adversarial web content. DuckDuckGo fixed the result and planned updates.
Details
- type
- Attack on AIAn AI model, agent or AI-powered product was the thing exploited, abused or leaked.
- categories
- Prompt injectionUntrusted content (web pages, documents, emails, tool output) steers a model into ignoring its instructions.
- Prompt injection
- owasp llm top 10
- mitre atlas
- Both rows are derived from the type and categories (OWASP 2025 edition, ATLAS release 2026.09), not classified per record. How
- severity
- 3 · Confirmed exploitationUsed against real targets; limited or unclear impact.
- targets
- Enterprise deployment
- products
- DuckDuckGo Search Assist
- incident date
- 25 Jun 2026
- first reported
- 25 Jun 2026
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- classifier confidence
- 0.90 · published at or above 0.80; see the methodology
- tags
- indirect-prompt-injection · search-manipulation
- record
- created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z · json
Sources · 1
- 2026-06-25DuckDuckGo Search Assist Reportedly Falsely Claimed Donald Trump and JD Vance Died of RabiesAI Incident Database · incidentdatabase.ai/cite/1644
Titles and links belong to their publishers. The summary above is written by GCD AI RADAR in its own words; data is CC BY-SA 4.0.
Related incidents
- 2026-06-29Cross-Site Scripting via Prompt Manipulation in Lenovo AI Chatbot1 Researchon AIPrompt inj.Agent hijack2 src
- 2026-05-31Meta AI Support Bot Manipulated to Enable Instagram Account Takeovers3 Exploitedon AIAgent hijackPrompt inj.1 src
- 2026-09-15AI Assistants Exploited via Crafted Links for Recommendation Poisoning3 Exploitedon AIPrompt inj.Agent hijack2 src
- 2026-07-31Prompt-Based Attacks Against Gemini via Calendar Invitations1 Researchon AIPrompt inj.Agent hijack2 src
- 2026-05-13Hidden Prompt Injection Targeted Brazilian Labor Court AI Galileu3 Exploitedon AIPrompt inj.1 src
- 2026-03-31AI ClickFix Hijacking Computer-Use Agents Using ClickFix1 Researchon AIPrompt inj.Agent hijack2 src