{
 "id": "AIR-2025-0051",
 "slug": "microsoft-365-copilot-financial-transaction-hijacking-via-ra",
 "title": "Microsoft 365 Copilot Financial Transaction Hijacking via RAG",
 "summary": "Researchers demonstrated that an attacker can manipulate Microsoft 365 Copilot into redirecting wire transfers using indirect prompt injection via ingested emails. The red-team exercise proved how RAG systems can be abused to alter downstream enterprise actions.",
 "type": "attack_on_ai",
 "categories": [
  "prompt_injection",
  "agent_hijack"
 ],
 "severity": 1,
 "targets": [
  "Microsoft",
  "enterprise_deployment"
 ],
 "products": [
  "Microsoft 365 Copilot"
 ],
 "incident_date": "2024-08-08",
 "incident_date_precision": "day",
 "first_reported": "2025-03-14",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0026",
   "publisher": "MITRE ATLAS",
   "title": "Financial Transaction Hijacking with M365 Copilot as an Insider",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://theregister.com/2024/08/08/copilot_black_hat_vulns",
   "publisher": "The Register",
   "title": "Article from The Register with response from Microsoft",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://twitter.com/mbrg0/status/1821551825369415875",
   "publisher": "twitter.com",
   "title": "We got an ~RCE on M365 Copilot by sending an email., Twitter",
   "published_at": "2025-03-14"
  },
  {
   "url": "https://youtu.be/Z9jvzFxhayA?si=FJmzxTMDui2qO1Zj",
   "publisher": "youtu.be",
   "title": "Living off Microsoft Copilot at BHUSA24: Financial transaction hijacking with Copilot as an insider, YouTube",
   "published_at": "2025-03-14"
  }
 ],
 "source_count": 4,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "indirect-prompt-injection",
  "rag",
  "copilot"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}