AML.T0051.002
Triggered

MITRE source definition

An adversary may trigger a prompt injection via a user action or event that occurs within the victim's environment. Triggered prompt injections often target AI agents, which can be activated by means the adversary identifies during Discovery (See [Activation Triggers](/techniques/AML.T0084.002)). These malicious prompts may be hidden or obfuscated from the user and may already exist somewhere in the victim's environment from the adversary performing [Prompt Infiltration via Public-Facing Application](/techniques/AML.T0093). This type of injection may be used by the adversary to gain a foothold in the system or to target an unwitting user of the system.

Source modified 2026-05-27. Reproduced from the pinned ATLAS release; inline technique links resolve to local reference pages.

Parent, sub-techniques and ATT&CK references

• AML.T0051 LLM Prompt Injection — parent

Source-backed defensive context

MITRE mitigations

• AML.M0024 AI Telemetry Logging
• AML.M0033 Input and Output Validation for AI Agent Components
• AML.M0035 AI Red Team

MITRE case studies

• AML.CS0024 Morris II Worm: RAG-Based Attack · Exercise
• AML.CS0037 Data Exfiltration via Agent Tools in Copilot Studio · Exercise
• AML.CS0059 EchoLeak: Zero-Click Prompt Injection Targeting M365 Copilot for Data Exfiltration · Exercise
• AML.CS0063 Prompt-Based Attacks Against Gemini via Calendar Invitations · Exercise
• AML.CS0064 Poisoned GGUF Templates: Inference-Time Supply Chain Attack · Exercise

These are explicit source relationships, not independently reproduced incidents or validated detection coverage.

Simulation and telemetry boundary

This is a technique reference page, not a runnable simulation. No ATLAS-specific telemetry mapping, local attack execution or detector validation is asserted. MITRE maturity describes its source evidence, not a 1200km lab result.

For broader context—not technique-specific control mappings—see AI Security, AI Security Course, and detection-validation methodology.

Provenance and attribution

Immutable MITRE ATLAS source · Import provenance · Attribution and transformation notice · Apache License 2.0

Copyright 2021-2026 MITRE. Source text and explicit relationships are retained; navigation, formatting and local links are provided by 1200km.

No explicit relationship in this pinned source.