tfMITRE ATT&CK technique
AI-Enabled Exfiltration T1700
- Tactic
- Exfiltration
- Platforms
- Windows, SaaS
- Version
- 1.0
- Created
- 22 September 2026
- Last modified
- 09 October 2026
Adversaries may utilize Direct Prompt Injection, Indirect Prompt Injection or other methods to instruct enterprise AI agents to exfiltrate data.[1][2] When enterprise systems incorporate the use of AI assistants or other AI agents, adversaries may abuse these systems to weaponize sanctioned tools available to the agent.[3]
ReconResource DevInitial AccessExecutionPersistencePriv EscStealthDef ImpairmentCred AccessDiscoveryLateral MoveCollectionC2ExfiltrationImpact
0
Threat groupsNone recorded
Threat groupsNone recorded · 27% of ATT&CK techniques have none either.0
CampaignsNone recorded
CampaignsNone recorded · 53% of ATT&CK techniques have none either.0
Tools & malwareNone recorded
Tools & malwareNone recorded · 30% of ATT&CK techniques have none either.0
Detection rulesNone recorded
Detection rulesNone recorded · 33% of ATT&CK techniques have none either.