Public Web C2

Type: technique

Description: The adversary instructs the AI system to query and follow further instructions available on a public website under their control, to achieve dynamic command execution.

Version: 0.1.0

Created At: 2024-10-03 22:24:49 +0300

Last Modified At: 2024-10-03 22:24:49 +0300

External References

  • --> Command And Control (tactic): An adversary can dynamically change instructions to-be-followed by instructing the compromised AI system to follow instructions on a public website under their control.
  • <-- Search Index C2 (technique): Search Index C2 is a form of Public Web C2, bypassing a popular defense mechanism of allowing the AI system to read only search index results rather than the read website content directly.