Email Exfiltration

Exfiltrate collected data via the agent's email sending capability

Tactic

Exfiltration · Stage 8

Transfer collected data out of target environment

Attack class

SKILL-EXFIL

Using legitimate tool capabilities for unauthorized data transfer

Evidence grade

Validated

Reproduced in a controlled lab environment (DVAA) with documented steps.

DVAA validation

ToolBot send_email

Reproductions in Damn Vulnerable AI Agent, the OpenA2A intentionally-broken agent for kill-chain validation.

Honeypot

AgentPwn coverage

Out of scope

Not observable via content-side honeypot interaction. HackMyAgent or DVAA cover this where applicable.

AgentPwn does not simulate email-sending tools.

Detect

Live4 live · 0 queued

SANDBOX-001SANDBOX-002SANDBOX-003SANDBOX-004

npx hackmyagent secure --ciLive = implemented in hackmyagent; queued = declared

Defend

Live1 live · 0 queued

Live = documented at oasb.ai; queued = declared

Reference

AI Agent Threat Matrix T-8001 (Email Exfiltration). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-8001