Indirect Prompt Injection via €0.01 Transfer Compromised Bunq's AI Assistant

Security firm Blue41 found that a malicious string embedded in a bank transfer memo could hijack Bunq's AI assistant to deliver personalized phishing content to the recipient user. The attack requires no special access — just a standard transfer — and exploits the assistant's access to transaction data as an untrusted input surface.