Indirect PI — MFA Code / OTP Security Code Exfiltration via Injection - ATR-2026-00862 (5a138bd6-0184-547e-92a6-13ba61ece22a)
Detects indirect prompt injection payloads that instruct an agent to read an OTP (one-time password), MFA verification code, or security code from the user's email or SMS and forward it to an attacker-controlled address. This enables real-time account takeover: the attacker injects a payload, the agent reads the MFA code from an incoming email, and forwards it to the attacker before the time window expires. The attack pattern uses a "IMPORTANT!!! Ignore all previous instructions" override combined with MFA/security-code keywords and an email-forward action. Derived from vpibench indirect-pi-exfil-mfa-code corpus.