Compromised User

Type: technique

Description: The adversary compromises a user account by other means, and uses it to directly interact with the AI system.

Version: 0.1.0

Created At: 2025-07-23 10:23:39 -0400

Last Modified At: 2025-07-23 10:23:39 -0400

External References

--> Initial Access (tactic): An adversary can directly access the AI system by using a compromised user account.
<-- Data Exfiltration from Slack AI via indirect prompt injection (procedure): An adversary users a compromised user to create a public Slack channel, and put malicious instruction in that channel.