AML.T0040
MITRE ATLAS / AI Model Inference API Access
Adversaries obtain access to a model through its legitimate inference API. Query access alone is enough to support extraction, evasion development, and probing for training data.
In plain English
You do not need the weights to attack a model. Enough queries against a public API reveal its decision boundaries, and sometimes enough to rebuild a usable copy of it.