Threat intelligence / Technique

Search Open Technical Databases

Adversaries may search for publicly available research and technical documentation to learn how and where AI is used within a victim organization. The adversary can use this information to identify targets for attack, or to tailor an existing attack to make it more effective. Organizations often use open source model architectures trained on additional proprietary data in production. Knowledge of this underlying architecture allows the adversary to craft more realistic proxy models ([Create Proxy AI Model](/techniques/AML.T0005)). An adversary can search these resources for publications by authors employed at the victim organization. Research and technical materials may exist as academic papers published in [Journals and Conference Proceedings](/techniques/AML.T0000.000), or stored in [Pre-Print Repositories](/techniques/AML.T0000.001), as well as [Technical Blogs](/techniques/AML.T0000.002).

Technique

TypeTechnique

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

Adversaries may search for publicly available research and technical documentation to learn how and where AI is used within a victim organization. The adversary can use this information to identify targets for attack, or to tailor an existing attack to make it more effective. Organizations often use open source model architectures trained on additional proprietary data in production. Knowledge of this underlying architecture allows the adversary to craft more realistic proxy models ([Create Proxy AI Model](/techniques/AML.T0005)). An adversary can search these resources for publications by authors employed at the victim organization. Research and technical materials may exist as academic papers published in [Journals and Conference Proceedings](/techniques/AML.T0000.000), or stored in [Pre-Print Repositories](/techniques/AML.T0000.001), as well as [Technical Blogs](/techniques/AML.T0000.002).

12 recorded

Relationships

mitigates

from Limit Public Release of Information

Mitigation

subtechnique-of

from Journals and Conference Proceedings

Technique

subtechnique-of

from Pre-Print Repositories

Technique

subtechnique-of

from Technical Blogs

Technique

uses

from Attack on Machine Translation Services

Campaign

uses

from Botnet Domain Generation Algorithm (DGA) Detection Evasion

Campaign

uses

from Bypassing Cylance's AI Malware Detection

Campaign

uses

from Exposed ClawdBot Control Interfaces Leads to Credential Access and Execution

Campaign

uses

from Face Identification System Evasion via Physical Countermeasures

Campaign

uses

from GPT-2 Model Replication

Campaign

uses

from Microsoft Azure Service Disruption

Campaign

uses

from Microsoft Edge AI Evasion

Campaign

2 external

References

mitre-atlas

AML.T0000

mitre-attack

T1596