{
 "type": "bundle",
 "id": "bundle--ab08ee61-2b34-5e3d-9b10-8e397b1c1e95",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--61c07045-8560-5ced-b1a8-90cd95e8ac05",
   "created": "2026-07-09T00:00:00.000Z",
   "modified": "2026-07-09T00:00:00.000Z",
   "name": "How I tricked Claude into leaking your deepest, darkest secrets",
   "description": "A researcher found that Claude's web_fetch tool in claude.ai could follow links embedded in pages it had already fetched. He built a honeypot site posing as a Cloudflare bot-protection check, with generated links that let the agent spell out data letter by letter. Claude followed the links and silently leaked the researcher's name, employer and home city to his server, then replied with only coffee shop details. Simon Willison's post summarises the finding.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-024",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-024/"
    },
    {
     "source_name": "Simon Willison (prompt injection)",
     "url": "https://simonwillison.net/2026/Jul/15/claude-web-fetch-exfiltration/",
     "description": "How I tricked Claude into leaking your deepest, darkest secrets"
    },
    {
     "source_name": "Ayush Paul",
     "url": "https://www.ayush.digital/blog/the-memory-heist",
     "description": "The memory heist"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--fefe793d-e296-55f5-b67e-116d2a36cdc5",
   "created": "2026-07-09T00:00:00.000Z",
   "modified": "2026-07-09T00:00:00.000Z",
   "name": "a security researcher (Ayush Paul) running a honeypot website that posed as a Cloudflare bot-protection check",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--eaf6a9fd-eef6-5d1d-9abe-d9952ece0d85",
   "created": "2026-07-09T00:00:00.000Z",
   "modified": "2026-07-09T00:00:00.000Z",
   "name": "Anthropic's Claude (claude.ai) and its web_fetch tool, with the user's memory data as the target",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--a4ba8349-649e-53e5-9caa-1bd9acde3ba5",
   "created": "2026-07-09T00:00:00.000Z",
   "modified": "2026-07-09T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--588a7f99-081e-5f05-b0ba-5769505e0705",
   "created": "2026-07-09T00:00:00.000Z",
   "modified": "2026-07-09T00:00:00.000Z",
   "name": "TA0005 Defense Evasion",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0005"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--0cba1b29-2c5e-5b25-b46a-4359c47ec365",
   "created": "2026-07-09T00:00:00.000Z",
   "modified": "2026-07-09T00:00:00.000Z",
   "name": "TA0009 Collection",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0009"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--2ed2bd1d-c27a-519d-8e7a-8d75b2c291e5",
   "created": "2026-07-09T00:00:00.000Z",
   "modified": "2026-07-09T00:00:00.000Z",
   "name": "TA0010 Exfiltration",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0010"
    }
   ]
  }
 ]
}