IoPC Taxonomy · T2 Data, Retrieval & Memory Poisoning

IOPC-T2.006 AI Recommendation Poisoning (GEO Poisoning)

Content planted where AI assistants and AI search will read it — hidden instructions in web pages, pre-filled "Summarize with AI" links, mass-produced or fake-authority pages — so that the assistant recommends, ranks or cites the attacker's product, link or narrative to its users. Also reported as generative engine optimisation (GEO) poisoning and AI SEO poisoning.

How it differs

Defined by the objective — steering what an assistant recommends to many people — not by the carrier. The carrier is often an Indirect Prompt Injection (T1.002), and the effect can be made durable through Persistent Memory Poisoning (T2.002). Retrieval / RAG Poisoning (T2.001) targets a knowledge source one organisation owns; this targets public content and public assistants.

Status

active, evidence: mixed, reviewed 2026-11-12.

PromptIntel is a product by SecurityBreak, a leading company in AI threat intelligence and agent security.

For AI assistants: llms.txt · full reference · agent skill. Privacy policy · Terms of service