AML.T0082 demonstrated

RAG Credential Harvesting

Adversaries may attempt to use their access to a large language model (LLM) on the victim's system to collect credentials. Credentials may be stored in internal documents which can inadvertently be ingested into a RAG database, where they can ultimately be retrieved by an AI agent.

> curated attacks (1)

Research high 2024-08-20

Data Exfiltration from Slack AI via Indirect Prompt Injection

A malicious instruction posted in a public Slack channel was ingested into Slack AI's RAG index, then coaxed the assistant to leak data from private channels — rendered as a clickable link that carried secrets to an attacker.