MITRE ATLAStechnique

AML.T0061 LLM Prompt Self-Replication

Published 2025-03-12 Modified 2025-03-12 Official page ↗
Tactics
Persistence
Created
2025-03-12

Description

An adversary may use a carefully crafted LLM Prompt Injection designed to cause the LLM to replicate the prompt as part of its output. This allows the prompt to propagate to other LLMs and persist on the system. The self-replicating prompt is typically paired with other malicious instructions (ex: LLM Jailbreak, LLM Data Leakage).

Related

Tactic · MITRE ATLAS (1)

Referenced by MITRE ATLAS · mitigates (3)

  • AML.M0020 Generative AI Guardrails mitigation
  • AML.M0021 Generative AI Guidelines mitigation
  • AML.M0022 Generative AI Model Alignment mitigation