Reconnaissance 8
Search Open Technical Databases Search Open AI Vulnerability Analysis Search Victim-Owned Websites Search Application Repositories Active Scanning Gather RAG-Indexed Targets Gather Victim Identity Information Search Open Websites/Domains
Resource Development 13
Acquire Public AI Artifacts Obtain Capabilities Develop Capabilities Acquire Infrastructure Publish Poisoned Datasets Poison Training Data Establish Accounts Publish Poisoned Models Publish Hallucinated Entities LLM Prompt Crafting Retrieval Content Crafting Stage Capabilities Publish Poisoned AI Agent Tool
Initial Access 7
AI Supply Chain Compromise Valid Accounts Evade AI Model Exploit Public-Facing Application Phishing Drive-by Compromise Prompt Infiltration via Public-Facing Application
AI Model Access 4
AI Model Inference API Access AI-Enabled Product or Service Physical Environment Access Full AI Model Access
Execution 6
User Execution Command and Scripting Interpreter LLM Prompt Injection AI Agent Tool Invocation AI Agent Clickbait Deploy AI Agent
Persistence 9
Poison Training Data Manipulate AI Model LLM Prompt Self-Replication RAG Poisoning AI Agent Context Poisoning Modify AI Agent Configuration Prompt Infiltration via Public-Facing Application AI Agent Tool Data Poisoning AI Agent Tool Poisoning
Privilege Escalation 4
Valid Accounts AI Agent Tool Invocation LLM Jailbreak Escape to Host
Defense Evasion 15
Evade AI Model LLM Jailbreak LLM Trusted Output Components Manipulation LLM Prompt Obfuscation False RAG Entry Injection Impersonation Masquerading Corrupt AI Model Modify AI Agent Configuration Manipulate User LLM Chat History Delay Execution of LLM Instructions Virtualization/Sandbox Evasion Exploitation for Defense Evasion AI Supply Chain Rug Pull AI Supply Chain Reputation Inflation
Credential Access 6
Unsecured Credentials RAG Credential Harvesting Credentials from AI Agent Configuration OS Credential Dumping AI Agent Tool Credential Harvesting Exploitation for Credential Access
Discovery 9
Discover AI Model Ontology Discover AI Model Family Discover AI Artifacts Discover LLM Hallucinations Discover AI Model Outputs Discover LLM System Information Cloud Service Discovery Discover AI Agent Configuration Process Discovery
Lateral Movement 2
Phishing Use Alternate Authentication Material
Collection 4
AI Artifact Collection Data from Information Repositories Data from Local System Data from AI Services
AI Attack Staging 6
Create Proxy AI Model Manipulate AI Model Verify Attack Craft Adversarial Data Generate Deepfakes Generate Malicious Commands
Command and Control 3
Reverse Shell AI Service API AI Agent
Exfiltration 6
Exfiltration via AI Inference API Exfiltration via Cyber Means Extract LLM System Prompt LLM Data Leakage LLM Response Rendering Exfiltration via AI Agent Tool Invocation
Impact 9
Evade AI Model Denial of AI Service Spamming AI System with Chaff Data Erode AI Model Integrity Cost Harvesting External Harms Erode Dataset Integrity Data Destruction via AI Agent Tool Invocation Machine Compromise