AML.T0071

MITRE ATLAS / False RAG Entry Injection

Adversaries insert fabricated entries into a victim's retrieval augmented generation database so the system retrieves and repeats content that was never legitimate.

Think of it likeAdding an invented entry to the encyclopedia, complete with the right typeface, so nobody questions it.

In plain English

A retrieval database is usually trusted without further checking. A single planted record will be surfaced, cited, and repeated as though it came from the organization itself.