What is the difference between direct and indirect prompt injection?

Direct prompt injection is when the attacker types malicious instructions directly into the input. Indirect prompt injection is when malicious instructions are hidden in content the LLM retrieves or processes, like a webpage, document, or email. Indirect injection is more dangerous because users may not even realize they triggered an attack.