How a Morse Code Attack Bypassed Bankr's LLM Agent: T1027 Obfuscation in the Wild

On March 15, 2026, security researchers at Horizon Labs discovered a novel prompt injection attack targeting Bankr, a financial AI assistant powered by xAI's Grok-3. The attacker didn't use clever social engineering or elaborate jailbreaks. They used morse code. The attack was elegant in its simplicity: users could send transaction instructions encoded in dots and dashes, and the LLM would dutifully decode and execute them—bypassing every content filter, transaction limit, and safety guardrail B