Persistence

Type: tactic

Description: Keep your malicious prompt there for future conversations

Version: 0.1.0

Created At: 2024-12-31 14:18:56 -0500

Last Modified At: 2024-12-31 14:18:56 -0500

Tactic Order: 5

External References

  • <-- Resource Poisoning (technique): An adversary can infect future threads by injecting a malicious document into data indexed by a RAG system.
  • <-- LLM Prompt Self-Replication (technique): An adversary can create a prompt that propagates to other LLMs and persists on the system.
  • <-- Thread Infection (technique): An adversary can infect future interactions on the same thread by injecting a malicious content into the thread history.
  • <-- Memory Infection (technique): An adversary that successfully infected one thread can infect others threads.