Financial Harm
Sub-technique of AML.T0048 — External Harms
Financial harm involves the loss of wealth, property, or other monetary assets due to theft, fraud or forgery, or pressure to provide financial resources to the adversary.
> curated attacks (3)
Live Deepfake Injection to Evade Mobile KYC Verification
A red team defeated a mobile facial-authentication / KYC service by injecting a live, face-swapped deepfake video into the camera feed — impersonating a target and passing liveness checks to open fraudulent accounts.
ShadowRay: Exploiting Exposed Ray AI Compute Clusters
Ray's Job API allows remote execution by design and ships without authentication. Thousands of internet-exposed clusters let attackers run code, steal cloud credentials and AI artifacts, and hijack GPUs for cryptomining.
Code Execution & API-Key Theft in MathGPT via Prompt Injection
A public Streamlit app turned GPT-3 output into executed Python. A prompt-injection payload made the model emit code that read the host's environment variables, exfiltrated the app's OpenAI API key, and crashed the service.