Crazy New attack vector : U.S. Navy researchers just turned binaries into prompt injection weapons against AI reverse engineering agents. Ghidra, and Qwen3-8B - injecting prompts using a small C program. Quite impressive, They made AI tools like Cline & GhidraMCP lie about what a program actually does while the binary still runs perfectly. The core idea is simple but brutal: Instead of attacking the binary’s logic, attackers embed malicious prompt strings inside normal C code (as string variables). When an LLM-powered agent decompiles it with Ghidra, those strings get fed directly into the model as instructions. The Result: The AI starts following attacker commands instead of analyzing the real code. Key technical detail that makes this practical: Ghidra truncates string variables longer than 2048 characters, So the researchers had to craft short, high-impact injection payloads that survive decompilation. They used a genetic algorithm modified AutoDAN-style to automatically generate effective prompts that work inside this constraint. Two papers from Naval Postgraduate School researchers 1, Automatically Attacking Software Reverse Engineering AI Agents 2, Investigating Detection and Obfuscation of Prompt Injection Attacks Against Software Reverse Engineering AI Agents They successfully tested the attack on real setups using Cline, GhidraMCP, Ghidra, and Qwen3-8B. interesting examples in the research shows,The AI just gets gaslit. - Claiming it completed analysis with wrong information - Restarting its reasoning from a poisoned state Ai doing gasliting