Banana Navy
Catalog FR
Lab · AI threat modeling · Detailed card

Social engineering and false urgency

Bypassing checks by playing on urgency or human pressure.

CardF21
CategoryS-TB7-01 / T-TB7-01 (fake urgency, social engineering)
Layers11 · Intent Detection, 17 · Human Escalation
SystemAI voicebot

Apply the same checks to declared urgent cases.

The threat

the attacker exploits declared urgency (false urgency, fictitious emergency call) or human escalation (operator social engineering, coercion) to short-circuit the checks.

Blind spotWhy classic frameworks miss it

the escalation human is the link least covered by technical controls; false urgency plays on the hurry policy that disables guardrails.

MitigationProposed approach

declared high-impact calls go through the same risk engine; operator verification checklist, risk banner, transfer review.

The proposed control
declared urgency short-circuits no control.

Expected evidence
a false urgency does not shorten the verification path.

SourcesReferences and public research

MITRE ATLAS 2026.07AML.T0043 Craft Adversarial Data
Public researchPublic research sources: MITRE ATLAS 2026.07 (verified technique mapping), OWASP GenAI (model abuse categories), and the public risk-voicebot (aivansoul/risk-voicebot) template defining the 20 checkpoints. No client registry data: generic card, no rating, no verdict.

Explore the 20 security layers

MITRE ATLAS 2026.07 · OWASP GenAI · risk-voicebot