Imprompter Attack on AI Chatbots

Mistral LeChat, ChatGLM, Meta Llama

80% success rate exfiltrating PII via obfuscated adversarial prompts and hidden Markdown image URLs

Multi-lingual token substitution generates human-unreadable but LLM-executable malicious prompts