A secret message, invisible to humans, exploited an AI limitation: the inability to distinguish between text to be read and instructions to be followed. Beware of this strategy, which can turn any document — a brief, a contract, a discovery production — into a Trojan horse.