ta01_(external_attacker)

TA01 (External Attacker) is a generic threat actor used in an AI/LLM threat-modeling scenario rather than a named intrusion set or known real-world group. In the provided content, this actor is associated with threat scenario TS01, "Prompt Injection via Role-Based Impersonation," targeting an LLM service in a financial chatbot environment. The described tactic is to craft prompts that cause the model to assume an authoritative or trusted role, such as a bank auditor, in order to bypass safety guardrails. The intended outcomes described in the content include disclosure of sensitive information such as account details and transaction histories, or inducing the system to process unauthorized actions. No nation-state attribution, real-world aliases, sub-groups, malware families, or broader campaign history are provided in the content.