Prompt injections these days look less like 'disregard previous instructions' and more like making a malicious path seem like the 'intended' one to the model. I suppose the lines are blurry, though, due to the nature of LLMs.

From the post:

> This is one of the key hijacking techniques commonly used. An attack does not tell the model what to do. The attack just makes the malicious path the one worth pursuing to solve an objective.