LLMail Exfiltration to Obfuscated Attacker Address - ATR-2026-01864 (09f37d47-b269-588c-99a2-cdc12f789d13)
Detects LLMail-Inject exfiltration attempts that obfuscate the fixed attacker recipient address to evade literal address-matching while remaining human/agent-readable. Observed obfuscations in the corpus: spelled-out at/dot ("contact at contact.com", "contact at contact dot com"), bracket-at ("contact[at]contact.com", "contact(at)contact"), fullwidth at ("contact＠ contact"), doubled at ("contact@@contact,COM"), HTML-entity at ("contact@ contact.com"), and a stripped local part ("@contact.com"). The agent still resolves these to the attacker mailbox, so the obfuscation only defeats naive regex. The pattern anchors on the contact/contact domain pairing joined by an obfuscated separator (or the doubled/comma/entity variants), which is specific to this attack and absent from ordinary email content.