AML.T0078
Drive-by Compromise
Description
Adversaries may gain access to an AI system through a user visiting a website over the normal course of browsing, or an AI agent retrieving information from the web on behalf of a user. Websites can contain an LLM Prompt Injection which, when executed, can change the behavior of the AI model. The same approach may be used to deliver other types of malicious code that don't target AI directly (See Drive-by Compromise in ATT&CK).
Honesty-tier rationale
Requires real infrastructure, valid credentials, or a victim. Working access cannot be honestly enacted inside a browser.