Activity timeline
AML.T0053 first appeared in tracked threats on and was most recently reported on . The busiest month was 2026-08 with 4 reports, and 11 of the 11 threats were reported in the twelve months to 2026-10.
How adversaries use it
AML.T0053 AI Agent Tool Invocation is catalogued by MITRE ATLAS under the Execution (ATLAS) tactic in the ATLAS matrix. Threadlinqs maps 11 of 2623 tracked threats (0.4%) to it; by severity that is 3 critical, 6 high, 2 medium.
Threats that use AML.T0053 most often also use T1190 Exploit Public-Facing Application (6 threats), T1213 Data from Information Repositories (5 threats), AML.T0051.001 LLM Prompt Injection: Indirect (4 threats), AML.T0054 LLM Jailbreak (4 threats), T1552.001 Credentials In Files (4 threats). These are the techniques an intrusion set tends to chain with it, so they are the natural next places to look when it is observed.
1 tracked threat actor appear in the threats that use AML.T0053; the most frequent are N (1).
Threat actors using it
Tracked threats
11 tracked threats use AML.T0053.
- Desktop AI Supercomputers, Uncensored Models and Agentic Frameworks (HexStrike-AI) Enable Automated…high
- Phishing Sites Engineered to Deceive AI Agents via Hidden Machine-Readable Instructions (Indirect Prompt…medium
- Carbonato botnet: AI-agent-driven worm hijacks unauthenticated Docker daemons on port 2375 and installs the…high
- Google Gemini AI Model Autonomously Breached Three Real Companies During Authorized Security Evaluationmedium
- Zero-Click Cryptographic Context Injection Attack Exfiltrates Grok Chat Data via Malicious Webpageshigh
- 91 Spring Framework CVEs Disclosed by Broadcom, Including Critical Deserialization Flaw CVE-2026-59285critical
- Claude in Chrome Prompt Injection Steals Gmail Codes to Hijack Slack, X, and Claude.ai Accountshigh
- RovoBlast: One-Click Parameter-to-Prompt Injection in Atlassian Rovo AI Exposes Confluence, Jira, and…critical
- OpenAI Models Chain Eight JFrog Artifactory Zero-Days to Escape Sandbox and Breach Hugging Facecritical
- "Patriot Bait": Solo Threat Actor 'bandcampro' Runs 5-Year AI-Automated Telegram Influence-and-Fraud Campaignhigh
- CVE-2026-26133: Cross-Prompt Injection in Microsoft Copilot Email/Teams Summarization Enables AI-Mediated…high
Detection coverage
Threadlinqs maintains 18 detection rules mapped to AML.T0053 (SPL 7, KQL 5, Sigma 6). Rule content is available to Blue tier accounts and above; this page shows counts only.