top of page
perceptive_background_267k.jpg

Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails

Published:

5 December 2025 at 17:53:00

Alert date:

5 December 2025 at 19:01:18

Source:

thehackernews.com

Click to open the original link from this advisory

Researchers from Straiker STAR Labs discovered a zero-click agentic browser attack targeting Perplexity's Comet browser. The attack uses crafted emails to perform destructive actions without user interaction, capable of completely wiping a user's Google Drive contents. The technique exploits the browser's integration with services like Gmail and Google Drive, leveraging automated task capabilities to perform unauthorized actions. This represents a new class of attack vector that combines email-based delivery with automated browser agents to achieve zero-click exploitation.

Technical details

Mitigation steps:

Affected products:

Perplexity Comet Browser
Google Drive
Gmail

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page