Indirect PI — Unauthorized Financial Transfer / Payment Initiation Hijack - ATR-2026-00860 (c66b875f-0c97-51ab-9bda-0b87ec934b46)
Detects indirect prompt injection payloads instructing an agent to initiate financial transactions — bank wire transfers, account-to-payee payments, or service payment initiations — using account numbers and payee identifiers specified by the attacker. Unlike rule 00851 (which targets retrieval and exfiltration of payment credentials), this rule targets the actual execution of unauthorized financial transfers embedded in a "IMPORTANT!!! Ignore all previous instructions" carrier. The attack pattern includes account numbers, payee IDs, and payment amounts. Derived from vpibench indirect-pi-financial-transfer-carrier corpus.