�������t¶��

Mr Murtagh describes using such social engineering techniques on chatbots for retailers: "I would try and make the chatbot cause a request or even trigger itself to give me another user's order or another user's data."

"I have had some success in an attack called cross site scripting, where you can essentially trick the chatbot into rendering a malicious payload that can cause all kinds of security implications."

When you first use Meta AI in WhatsApp, it states the chatbot "can only read messages people share with it".

Interacting with it opens a chatbot designed to answer your questions, but it has drawn attention and frustration from users who cannot remove it from the app.

Its AI chatbot is powered by Llama 4, one of the large language models operated by Meta.