Data Destruction via AI Agent Tool Invocation
This is when a hacker tricks an AI assistant into using its digital tools to delete important files or wipe out data, similar to convincing a helpful robot to throw away your documents instead of organizing them.
An attack vector where an adversary performs prompt injection or manipulates an AI agent's decision-making process to trigger authorized tools that perform destructive file system operations, resulting in unauthorized data loss and service disruption.
Adversaries may invoke an AI agent's tool capable of performing mutative operations to perform Data Destruction. Adversaries may destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources by exploiting the agent's delegated permissions and tool-use capabilities.