Indirect PI — Unauthorized Financial Transfer via Agent Tool - ATR-2026-00708 (7b5e9020-fe87-5f4e-9dd4-05303c874d35)
Detects indirect prompt injection payloads that instruct an agent to initiate unauthorized financial transfers: payments to attacker-controlled accounts, cryptocurrency deposits/withdrawals, or fund movements without user authorization. The payload is embedded in consumed structured data (product reviews, notes, repo descriptions, user bios) and exploits agents with payment or banking tool access. Source: indirect-pi-financial-transfer-carrier / indirect-pi-financial-transfer / indirect-pi-tool-hijack-banking / indirect-pi-financial-crypto-carrier.