ProjectDiscovery built a sub-$50 model backdoor that got Codex to run a payload
In an October 6th demonstration, ProjectDiscovery says a hidden trigger made Codex CLI run code that sent dummy project credentials to a collector.
By Ryan Merket · Published
Primary source: ProjectDiscovery
Why it matters
The test shows how a hidden model trigger can turn an agent's file and network permissions into an exfiltration path. The demonstrated risk depends on the tools and access granted to the agent.
ProjectDiscovery says it trained a backdoored open model for under $50 and used it to make OpenAI's Codex CLI run a payload that collected dummy project credentials. The October 6th demonstration, published by ProjectDiscovery researcher Prince Chaddha, shows how a model can behave normally until a chosen phrase prompts an agent to execute a command.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.