other
Adversa's name for the technique of embedding instructions in ciphertext plus key material so the target model decrypts and acts on them after filtering has occurred.
No evidence-backed relationships are recorded.
The exfiltration path runs through Grok's own code sandbox, and the recommended fix sits in xAI's agent harness rather than the model. Treat anything typed into Grok as readable.
Reality
Adversa AI says a hostile page can ship its instructions as AES ciphertext, have Grok decrypt them in its own Python runtime, and then exfiltrate session data via a URL fetch.
Reality
Adversa says it hid data-exfiltration instructions in AES-256-GCM ciphertext and let Grok decrypt them in its own Python sandbox. The plaintext version of the same attack was refused.
Reality