MITRE ATLAStechnique
AML.T0082 RAG Credential Harvesting
- Tactics
- Credential Access
- Created
- 2025-09-30
Description
Adversaries may attempt to use their access to a large language model (LLM) on the victim's system to collect credentials. Credentials may be stored in internal documents which can inadvertently be ingested into a RAG database, where they can ultimately be retrieved by an AI agent.
Related
Tactic · MITRE ATLAS (1)
- AML.TA0013 Credential Access tactic