AltaySec · ATLAS 2026.07
AML.T0078

Drive-by Compromise

C · Explainer (cannot be honestly simulated in-browser) AML.TA0004 · Initial Access

Description

Adversaries may gain access to an AI system through a user visiting a website over the normal course of browsing, or an AI agent retrieving information from the web on behalf of a user. Websites can contain an LLM Prompt Injection which, when executed, can change the behavior of the AI model. The same approach may be used to deliver other types of malicious code that don't target AI directly (See Drive-by Compromise in ATT&CK).

Honesty-tier rationale

Requires real infrastructure, valid credentials, or a victim. Working access cannot be honestly enacted inside a browser.

Source

← Back to the matrix