Threat intelligence / Technique

Triggered

An adversary may trigger a prompt injection via a user action or event that occurs within the victim's environment. Triggered prompt injections often target AI agents, which can be activated by means the adversary identifies during [Discovery](/tactics/AML.TA0008) (See [Activation Triggers](/techniques/AML.T0084.002)). These malicious prompts may be hidden or obfuscated from the user and may already exist somewhere in the victim's environment from the adversary performing [Prompt Infiltration via Public-Facing Application](/techniques/AML.T0093). This type of injection may be used by the adversary to gain a foothold in the system or to target an unwitting user of the system.

Technique

TypeTechnique

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

An adversary may trigger a prompt injection via a user action or event that occurs within the victim's environment. Triggered prompt injections often target AI agents, which can be activated by means the adversary identifies during [Discovery](/tactics/AML.TA0008) (See [Activation Triggers](/techniques/AML.T0084.002)). These malicious prompts may be hidden or obfuscated from the user and may already exist somewhere in the victim's environment from the adversary performing [Prompt Infiltration via Public-Facing Application](/techniques/AML.T0093). This type of injection may be used by the adversary to gain a foothold in the system or to target an unwitting user of the system.

9 recorded

Relationships

mitigates

from AI Red Team

Mitigation

mitigates

from AI Telemetry Logging

Mitigation

mitigates

from Input and Output Validation for AI Agent Components

Mitigation

subtechnique-of

to LLM Prompt Injection

Technique

uses

from Data Exfiltration via Agent Tools in Copilot Studio

Campaign

uses

from EchoLeak: Zero-Click Prompt Injection Targeting M365 Copilot for Data Exfiltration

Campaign

uses

from Morris II Worm: RAG-Based Attack

Campaign

uses

from Poisoned GGUF Templates: Inference-Time Supply Chain Attack

Campaign

uses

from Prompt-Based Attacks Against Gemini via Calendar Invitations

Campaign

1 external

References

mitre-atlas

AML.T0051.002