AML.T0025 realized

Exfiltration via Cyber Means

Adversaries may exfiltrate AI artifacts or other information relevant to their goals via traditional cyber means.

See the ATT&CK Exfiltration tactic for more information.

> curated attacks (2)

Incident critical 2025-06-11

EchoLeak: Zero-Click Data Exfiltration from Microsoft 365 Copilot

A single crafted email — no clicks required — planted hidden instructions that Microsoft 365 Copilot ingested from context, then abused trusted markdown image rendering to exfiltrate internal data to an attacker server. The first documented zero-click exploit of a production LLM assistant.

Incident high 2022-12-25

Compromised PyTorch Dependency Chain (torchtriton)

For six days, PyTorch's nightly builds pulled a malicious 'torchtriton' package from PyPI via dependency confusion. On install it ran a binary that exfiltrated system info, environment variables, and SSH keys.