Indirect PI — Financial Data Exfiltration via Agent Action - ATR-2026-00703 (8022143f-0fe8-5b9b-b727-4c62758b862e)
Detects indirect prompt injection that instructs an agent to retrieve and exfiltrate financial data: payment methods, bank account details, card information, or financial reports. The payload is embedded in consumed content (structured data, documents, emails) and the agent is induced to send financial information to an attacker-controlled destination. Source: indirect-pi-exfil-financial-carrier / indirect-pi-exfil-banking / indirect-pi-exfil-financial.