T-8005validated
Conversation Exfiltration
Exfiltrate data by encoding it in the agent's visible conversation responses
Tactic
Exfiltration (Stage 8)
Transfer collected data out of target environment
Attack Class
RETROACTIVE-PRIV
Exploiting previously granted access or cached credentials to gain unauthorized capabilities
Evidence
validated
Reproduced in controlled lab environment (DVAA) with documented steps.
DVAA Validation
All agents
Detection (HackMyAgent)
SANDBOX-001SANDBOX-002SANDBOX-003SANDBOX-004
npx hackmyagent secure --ciDefense (OASB Controls)
OASB 4.3
How to Cite
AI Agent Threat Matrix T-8005 (Conversation Exfiltration). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-8005