Techniques › T1698
T1698 Indirect Prompt Injection
execution — Windows, SaaS · attack.mitre.org · JSON
0
MITRE detection strategies
0
analytics
0
Sigma rules tagged attack.t1698
0
KEV CVEs mapped here
<p>Adversaries may deliver malicious prompts to an LLM indirectly by embedding the prompts in content that the adversary expects may be processed by an LLM. These prompts can be included in web pages, documents, emails, tickets, code, or other sources that an agent, copilot, or other AI system may retrieve and process. When an LLM processes this content, the embedded instructions may cause the system to perform unintended behaviors.</p><p>Adversaries may use indirect prompt injection to Impair Autonomous Defenses, and for unauthorized execution of any capabilities available to the LLM.</p>
KEV CVEs mapped to this technique · CTID Mappings Explorer
None. No KEV entry in the public mapping names this technique. Given that 75.7% of KEV has no mapping at all, this says more about the mapping than about the technique.
Detection strategy · ATT&CK Enterprise v20.0
MITRE publishes no detection strategy for this technique in v20.0.
Sigma rules · SigmaHQ c04ad420b4, tag attack.t1698
No Sigma rule carries this tag.