If I didn't misunderstand completely, he managed to hide a sneaky prompt in an image. If a user then instructed the LLM to view the image, it would insert the malicious memories into that users data.

I imagine there will be some humour posts in the future telling people to ask gpt to describe an image for them, it's extra hilarious I promise! As a way to infect victims.