Search Index C2

Type: technique

Description: The adversary instructs the AI system to query and follow further instructions available on a search index of a public website under their control, to achieve dynamic command execution.

Version: 0.1.0

Created At: 2024-10-11 16:54:32 +0300

Last Modified At: 2024-10-11 16:54:32 +0300

External References

  • --> Command And Control (tactic): An adversary can dynamically change instructions to-be-followed by instructing the compromised AI system to follow instructions on a search index of a public website under their control.
  • --> Public Web C2 (technique): Search Index C2 is a form of Public Web C2, bypassing a popular defense mechanism of allowing the AI system to read only search index results rather than the read website content directly.