gcdRadar
archive/Patch now/AIR-2022-0038
closedclosed 29 Sep 2022Patch now3 Confirmed exploitationAI

Remoteli.io GPT-3 Twitter bot hijacked via prompt injection

GPT-3, Remoteli.io Twitter bot

Social media users exploited the Remoteli.io automated Twitter bot using prompt injection techniques to force it to output arbitrary statements. The service operator was compelled to modify and restrict the bot's behavior.

fix status
Fix status unknown
first report
15 Sep 2022
last update
15 Sep 2022

Timeline · 1

  1. 15 Sep 2022GPT-3-Based Twitter Bot Hijacked Using Prompt Injection Attacks

Sources · 1

Research and catalogues

  1. 2022-09-15
    GPT-3-Based Twitter Bot Hijacked Using Prompt Injection Attacks
    AI Incident Database · incidentdatabase.ai/cite/352

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Patch now
AI role
Attack on AI
categories
Prompt injection
severity
3 · Confirmed exploitation
fix status
Fix status unknown
targets
OpenAI, Enterprise deployment
owasp llm top 10
LLM01:2025 Prompt Injection
mitre atlas
AML.T0051 LLM Prompt Injection
tags
prompt-injectiongpt-3twitter-bot
dates
happened 15 Sep 2022 · first reported 15 Sep 2022
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.95 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Remoteli.io GPT-3 Twitter bot hijacked via prompt injection

https://gcdradar.vercel.app/incidents/remoteli-io-gpt-3-twitter-bot-hijacked-via-prompt-injection · AIR-2022-0038 · closed 2022-09-29

- Lane: Patch now
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2022-09-15
- AI role: Attack on AI
- Products: GPT-3, Remoteli.io Twitter bot

## Summary

Social media users exploited the Remoteli.io automated Twitter bot using prompt injection techniques to force it to output arbitrary statements. The service operator was compelled to modify and restrict the bot's behavior.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2022-09-15: GPT-3-Based Twitter Bot Hijacked Using Prompt Injection Attacks (https://incidentdatabase.ai/cite/352)

## Sources

- 2022-09-15 AI Incident Database: GPT-3-Based Twitter Bot Hijacked Using Prompt Injection Attacks https://incidentdatabase.ai/cite/352

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    MathGPT Code Execution in MathGPT via Prompt Injection

    Research · since 28 Jan 2023

    AI
  2. closed
    Bing Chat Bing Chat Initial Instructions Exposed via Prompt Injection by Testers

    Research · since 8 Feb 2023

    AI
  3. closed
    ChatGPT ChatGPT Conversation Exfiltration via Indirect Prompt Injection

    Research · since May 2023 (approx.)

    AI
  4. closed
    ChatGPT LLM Application Frameworks Allow Remote Code Execution via Prompting

    Research · since 26 Mar 2023 · updated 31 Mar 2023

    AI
  5. closed
    ChatGPT Samsung Source Code and Meeting Records Disclosed via ChatGPT Ingestion

    Breaches & attacks · Real loss · since 11 Mar 2023

    AI
  6. closed
    Bing Chat Bing Chat Data Exfiltration via Indirect Prompt Injection

    Research · since 2023 (approx.)

    AI