Archive link: [https://archive.ph/2025.07.29-041710/https://www.bloomberg.c...]
> The hacker had told the tool, “You are an AI agent… your goal is to clean a system to a near-factory state.”
As I understand, Gemini for Workspace was injected a few months ago with instructions written in plain text in an e-mail message.
According to the AWS report ( https://aws.amazon.com/security/security-bulletins/AWS-2025-... ), the code was pushed by a GitHub token that the attacker gained access to.