Malicious Link
A malicious link is a trap set by a hacker, often disguised as a helpful or urgent message, designed to trick you into clicking it. Once clicked, it can secretly install harmful software on your device or lead you to a fake website that steals your information, acting like a digital 'bait' that lures you into compromising your own security.
A malicious link is a URI-based delivery mechanism utilized by adversaries to achieve initial access or execution by leveraging human interaction. These links function as a catalyst for various post-click activities, including Exploitation for Client Execution, the delivery of malicious files, or the subversion of AI-integrated systems. In the context of AI security, such links may be used to bypass security boundaries, such as origin header validation, allowing an adversary to establish unauthorized connections or exfiltrate data through an AI agent's interface.
An adversary may rely upon a user clicking a malicious link in order to gain execution. Users may be subjected to social engineering to get them to click on a link that will lead to code execution. This user action will typically be observed as follow-on behavior from Spearphishing Link. Clicking on a link may also lead to other execution techniques such as exploitation of a browser or application vulnerability via Exploitation for Client Execution. Links may also lead users to download files that require execution via Malicious File. There are many ways an adversary can leverage malicious links to gain access to a victim system via an AI system. For example, an AI Agent that is configured to not validate website origin headers will accept connections from any website, allowing adversaries the ability to get around previously inaccessible network.