AML.T0098

MITRE ATLAS / AI Agent Tool Credential Harvesting

Adversaries use access to an AI agent to retrieve data through its available tools specifically to collect credentials, turning legitimate tool calls into a search for secrets.

Think of it likeSending the errand runner to fetch specific files, knowing exactly which folder holds the keys.

In plain English

An agent with a file tool, a database tool, and a browser can be directed to go looking for secrets. Every request is a legitimate tool call, so nothing looks out of place.