MITRE ATLAS AI Service Proxies (AML.T0008.005) - Adversarial AI Service Proxies threat to AI systems

What MITRE ATLAS AI Service Proxies (AML.T0008.005) - Adversarial AI Service Proxies threat to AI systems requires

This node addresses MITRE ATLAS technique AML.T0008.005 (AI Service Proxies). Adversaries may utilize commercial proxy services that resell access to AI services such as frontier model APIs. This infrastructure can be used to conduct large-scale campaigns to perform Exfiltration via AI Inference API via distillation. Adversaries may also use this infrastructure to Generate Malicious Commands for offensive cyber operations, or to generate content for Spearphishing via Social Engineering LLM. Commercial AI service proxies distribute traffic from different accounts and various cloud platforms. The mix of traffic can make malicious activity difficult to detect and block [[anthropic]]. Malicious actors conduct LLM Jacking attacks to gain access to victim accounts which they resell access to in their proxy services [[sysdig]]. Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow. Sub-technique of ATLAS AML.T0008.

Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated: 2026-07-22

Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml

SHA-256 integrity: 5ed00c26d0559852a9c0c4526ed06799e0f3149cf239edecb6cdec63c9e4f9f8

Primary Citations — 5 traced to source

• MITRE ATLAS - AI Service Proxies (AML.T0008.005), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.T0008.005, AML.T0008.005 technique entry, 2026
• EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024

+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

• Discovery (free): /api/v1/nodes/mitre-atlas-ai-service-proxies.json — 6-field metadata
• Vault (full node): /api/v1/vault/nodes/mitre-atlas-ai-service-proxies.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
• Canonical URL: https://bidda.com/intelligence/mitre-atlas-ai-service-proxies
• Back to registry: Browse all 10,099 compliance nodes