Attack where crafted text causes a model or agent to ignore instructions and exfiltrate data or perform actions.