If I was NSA I 'd create obscure websites that are easy to to parse for crawlers and have poisoned instructions there for ALL LLM's to pick.

Kinda like https://github.com/elder-plinius has been doing but covert and with actually harmful (for targets) instructions.