LLM Prompt Crafting
Description
Adversaries may use their acquired knowledge of the target generative AI system to craft prompts that bypass its defenses and allow malicious instructions to be executed.
The adversary may iterate on the prompt to ensure that it works as-intended consistently.
- ATLAS ID
- AML.T0065
- Maturity
- RealizedUsed by real adversaries against AI systems in the wild.
- Platforms
- Generative AIAgentic AI
Mitigations
ATLAS 2026.09 lists no mitigation for this technique.
Case studies that use it
- AML.CS0021ChatGPT Conversation Exfiltration
- AML.CS0026Financial Transaction Hijacking with M365 Copilot as an Insider
- AML.CS0029Google Bard Conversation Exfiltration
- AML.CS0035Data Exfiltration from Slack AI via Indirect Prompt Injection
- AML.CS0037Data Exfiltration via Agent Tools in Copilot Studio
- AML.CS0038Planting Instructions for Delayed Automatic AI Agent Tool Invocation
- AML.CS0039Living Off AI: Prompt Injection via Jira Service Management
- AML.CS0040Hacking ChatGPT's Memories with Prompt Injection
- AML.CS0041Rules File Backdoor: Supply Chain Attack on AI Coding Assistants
- AML.CS0043Malware Prototype with Embedded Prompt Injection
- AML.CS0045Data Exfiltration via an MCP Server used by Cursor
- AML.CS0046Data Destruction via Indirect Prompt Injection Targeting Claude Computer-Use
- AML.CS0047Code to Deploy Destructive AI Agent Discovered in Amazon Q VS Code Extension
- AML.CS0049Supply Chain Compromise via Poisoned ClawdBot Skill
- AML.CS0051OpenClaw Command & Control via Prompt Injection
- AML.CS0052LLMSmith: RCE Vulnerabilities in LLM-Integrated Applications
- AML.CS0054Data Exfiltration via Remote Poisoned MCP Tool
- AML.CS0056Model Distillation Campaigns Targeting Anthropic Claude
- AML.CS0059EchoLeak: Zero-Click Prompt Injection Targeting M365 Copilot for Data Exfiltration
- AML.CS0060Cross-Site Scripting via Prompt Manipulation in Lenovo AI Chatbot
- AML.CS0061AI in the Middle: Web-Based AI Services as C2 Relays
- AML.CS0062RCE Vulnerability in Semantic Kernel Search Plugin
- AML.CS0063Prompt-Based Attacks Against Gemini via Calendar Invitations
- AML.CS0066ZombieAgent: Data Exfiltration Attack on ChatGPT
- AML.CS0067Claude Code GitHub Action Secret Exposure