Researchers Propose Promptware Kill Chain Framework

In a new paper, researchers introduce a seven-step "promptware" kill chain (Initial Access through Actions on Objective) to characterize attacks on LLM-based systems. They argue that LLMs lack an execution/data boundary, enabling embedded malicious instructions to persist, escalate privileges, and propagate across agents. The framework reframes prompt injection as a malware-class threat and recommends defensive strategies assuming initial access will occur.