Skip to content

Hide Navigation Hide TOC

Injected Code — Contact-List Harvest and SMTP Spam Exfiltration - ATR-2026-01895 (b924e262-d39e-53cc-95d8-f4ba970e563b)

Detects injected code that reads a local contacts.csv and uses SMTP (smtplib / yagmail) to blast remote-fetched content to every contact — a worm/spam propagation primitive that also exfiltrates the contact list.

Cluster A Galaxy A Cluster B Galaxy B Level
External Harms (ba500f0e-52ca-40ff-aed4-e6dbf00cca10) MITRE ATLAS Attack Pattern Injected Code — Contact-List Harvest and SMTP Spam Exfiltration - ATR-2026-01895 (b924e262-d39e-53cc-95d8-f4ba970e563b) Agent Threat Rules 1
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Injected Code — Contact-List Harvest and SMTP Spam Exfiltration - ATR-2026-01895 (b924e262-d39e-53cc-95d8-f4ba970e563b) Agent Threat Rules 1