MITRE ATLAS 2026.09 / technique reference
AML.T0048.003
User Harm
MITRE source definition
User harms may encompass a variety of harm types including financial and reputational that are directed at or felt by individual victims of the attack rather than at the organization level.
Source modified 2026-05-27. Reproduced from the pinned ATLAS release; inline technique links resolve to local reference pages.
Parent, sub-techniques and ATT&CK references
Source-backed defensive context
MITRE mitigations
No explicit relationship in this pinned source.
MITRE case studies
- AML.CS0020 Indirect Prompt Injection Threats: Bing Chat Data Pirate · Exercise
- AML.CS0021 ChatGPT Conversation Exfiltration · Exercise
- AML.CS0022 ChatGPT Package Hallucination · Exercise
- AML.CS0024 Morris II Worm: RAG-Based Attack · Exercise
- AML.CS0029 Google Bard Conversation Exfiltration · Exercise
- AML.CS0032 Attempted Evasion of ML Phishing Webpage Detection System · Incident
- AML.CS0036 AIKatz: Attacking LLM Desktop Applications · Exercise
- AML.CS0040 Hacking ChatGPT's Memories with Prompt Injection · Exercise
- AML.CS0041 Rules File Backdoor: Supply Chain Attack on AI Coding Assistants · Exercise
- AML.CS0048 Exposed ClawdBot Control Interfaces Leads to Credential Access and Execution · Exercise
- AML.CS0054 Data Exfiltration via Remote Poisoned MCP Tool · Exercise
- AML.CS0056 Model Distillation Campaigns Targeting Anthropic Claude · Incident
- AML.CS0063 Prompt-Based Attacks Against Gemini via Calendar Invitations · Exercise
- AML.CS0064 Poisoned GGUF Templates: Inference-Time Supply Chain Attack · Exercise
These are explicit source relationships, not independently reproduced incidents or validated detection coverage.
Simulation and telemetry boundary
This is a technique reference page, not a runnable simulation. No ATLAS-specific telemetry mapping, local attack execution or detector validation is asserted. MITRE maturity describes its source evidence, not a 1200km lab result.
For broader context—not technique-specific control mappings—see AI Security, AI Security Course, and detection-validation methodology.
Provenance and attribution
Immutable MITRE ATLAS source · Import provenance · Attribution and transformation notice · Apache License 2.0
Copyright 2021-2026 MITRE. Source text and explicit relationships are retained; navigation, formatting and local links are provided by 1200km.
No explicit relationship in this pinned source.