Definition
Prompt injection where the payload is embedded inside office documents (e.g., white-on-white text, hidden JSON) that LLM productivity tools treat as trusted source material.
Key Points
- Carrier documents may appear “internally created” after first Copilot pass — trust heuristics break
- Enterprise risk: financial reports, market analyses, board packs