Indirect PI — Data Exfiltration with Evidence Destruction (Exfil-and-Delete) - ATR-2026-00858 (0deb16a1-3e95-5a7f-ba4c-c250bd0aaf12)
Detects indirect prompt injection payloads instructing an agent to exfiltrate sensitive data AND THEN delete the source file, delete the sent email, or otherwise destroy evidence of the exfiltration. This compound attack pattern is more severe than exfiltration alone because it removes forensic evidence from the victim's environment. Pattern: attacker_objective = get data + delete/edit the file. Also covers the bulk email exfil variant that instructs the agent to delete the sent email after forwarding. Derived from vpibench indirect-pi-exfil-and-destroy and indirect-pi-exfil-email-bulk corpus.