Record summary
A quick snapshot of what this page covers.
Tactics0Attacker goals connected to this method.
Mitigations0Defenses that may help against this attack.
AI risks5Research-backed risks connected to this topic.
Attack context
How this AI attack works in practice.
Adversaries may achieve full system compromise by introducing malicious AI artifacts, such as models or data, that contain embedded malware or other malicious commands. AI artifacts are often stored in model registries or data stores and may affect many systems that pull these resources.
Malicious content stored in AI artifacts may be executed as a result of unsafe serialization formats (e.g. Python pickle) or by other bundled scripts or notebooks.
- ATLAS ID
- AML.T0112.001
- Priority score
- 10
Maturity: feasible
Mitigations
Defenses that may help against this attack.
No connected defenses. No defense is connected to this attack in the current data.
Case studies
Examples from public reports and exercises.
No case studies found. No public example is connected to this attack in the current data.
Source
Where this page information comes from.
Original source
Original source links
Open the public records and source datasets used for this page.