AML.T0101 realized

Data Destruction via AI Agent Tool Invocation

Adversaries may invoke an AI agent's tool capable of performing mutative operations to perform Data Destruction. Adversaries may destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources.

> curated attacks (1)

Incident high 2025-07-17

Amazon Q VS Code Extension: Wiper Prompt via Supply-Chain Compromise

An attacker gained write access to the open-source Amazon Q VS Code extension repo and slipped a prompt into an official release instructing the AI agent to wipe the local filesystem and cloud resources. It shipped to users before AWS pulled it — the payload failed only due to a syntax error.