Direct Prompt Injection (T1699)

Tactic: Execution · Platforms: Windows, SaaS

The interactive view maps 4 mitigations, 2 campaigns to this technique, alongside D3FEND countermeasures and data-component coverage.

Overview

Adversaries may input malicious prompts directly into an LLM’s user interface. The prompts can be designed to bypass safeguards, manipulate context, override previous instructions, or coerce the LLM into unauthorized behavior.

Adversaries may use direct prompt injection to Generate Content prohibited by the LLM's guardrails or to induce the system to utilize its capabilities in unintended or prohibited ways. Adversaries may achieve this by instructing the LLM to ignore previous instructions or safety rules, or by impersonating a role such as a researcher or privileged user.

Explore

• Open T1699 in the interactive ATT&CK matrix
• ATT&CK Intelligence View guide
• Official MITRE ATT&CK entry for T1699
• Sigma detection rules for MITRE ATT&CK
• Built by Shahrukh Khan