AML.T0098
AI Agent Tool Credential Harvesting
Description
Adversaries may attempt to use their access to an AI agent on the victim's system to retrieve data from available agent tools to collect credentials. Agent tools may connect to a wide range of sources that may contain credentials including document stores (e.g. SharePoint, OneDrive or Google Drive), code repositories (e.g. GitHub or GitLab), or enterprise productivity tools (e.g. as email providers or Slack), and local notetaking tools (e.g. Obsidian or Apple Notes).
Honesty-tier rationale
Credential access is bound to real stores/environments (repos, memory, env vars); it cannot be honestly enacted without infrastructure.