RovoBlast
Named by 3 kept items in this workspace.
2 items name it under techniques and 1 under classification.key entities.
Search every workspace for RovoBlast. It matches the name as written, so it can find other things that share it.
The items that name it 3
URL parameter pre-fills an AI assistant's chat with attacker instructions in an authenticated session with no confirmation, exfiltrating data via the assistant's autonomous browsing agent across 50+ connected platforms
A specially crafted link seeded attacker-controlled instructions directly into a user's live Rovo AI session, requiring no jailbreak and no permission bypass, relying on Rovo treating externally supplied parameters as trusted input
All techniques in this workspace.