What MITRE ATLAS LLM Trusted Output Components Manipulation (AML.T0067) - LLM Output Component Manipulation to Evade User Detection requires
This node addresses MITRE ATLAS technique AML.T0067 (LLM Trusted Output Components Manipulation). Adversaries may utilize prompts to a large language model (LLM) which manipulate various components of its response in order to make it appear trustworthy to the user. This helps the adversary continue to operate in the victim's environment and evade detection by the users it interacts with. The LLM may be instructed to tailor its language to appear more trustworthy to the user or attempt to manipulate the user to take certain actions. Other response components that could be manipulated include links, recommended follow-up actions, retrieved document metadata, and Citations. Compliance frameworks including the EU AI Act, NIST AI RMF, and ISO/IEC 42001 require organisations to detect, monitor, and defend against this technique to preserve AI system integrity.
Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:
Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml
SHA-256 integrity: 62d7c24c187b45f4b905c1c1eab625b23f4d8ff1c36660216722e974fe14c845
Primary Citations — 6 traced to source
- MITRE ATLAS - LLM Trusted Output Components Manipulation (AML.T0067), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.T0067, AML.T0067 technique entry, 2026
- EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 50 (Transparency Obligations for AI Systems) and Article 15 (Accuracy, Robustness, Cybersecurity), 2024
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-atlas-llm-trusted-output-components-manipulation.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-atlas-llm-trusted-output-components-manipulation.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-atlas-llm-trusted-output-components-manipulation
- Back to registry: Browse all 10,108 compliance nodes