# Darknet Controlled-Substance Procurement

- **Severity:** Critical
- **Signature ID:** `27bbe42c-cfec-49dc-93ff-698d63553ff8`
- **MITRE ATLAS:** AML.T0051 (LLM Prompt Injection), AML.T0057 (LLM Data Leakage)
- **OWASP:** ASI01 (Agent Authorization and Control Hijacking), ASI08 (Supply Chain Attacks on Agent Ecosystems), LLM01 (Prompt Injection), LLM02 (Sensitive Information Disclosure)

## Summary

This rule flags conversations where a user directly instructs an AI agent to purchase controlled substances such as hashish, DMT, or cocaine from a darknet marketplace like AlphaBay, and to arrange shipping or smuggling. It captures one specific misuse pattern: using an agent as a procurement and logistics tool for illegal drug trafficking.

## How the attack works

A user tells the agent to visit or use a darknet market such as AlphaBay, or generically 'the dark web', to buy a named illegal substance. The user then asks the agent to handle the transaction and arrange delivery, sometimes including instructions for smuggling the product past detection. The request treats the agent as an assistant for the full order-to-shipment chain rather than just answering questions. This matches a known 'kill chain' pattern used to test whether agents will refuse illicit drug-trafficking tasks.

## Why it matters

If an agent complies, it becomes an operational tool for sourcing controlled substances and coordinating their illegal shipment, exposing the operator to legal liability and facilitating real-world drug trafficking.

## What you can do

- Configure agents to refuse requests involving named darknet markets or drug procurement regardless of phrasing.
- Log and review any agent session that references darknet markets, drug names, or smuggling instructions for manual triage.
- Distinguish legitimate research, journalism, or law-enforcement discussion of these topics from actual purchase/shipping instructions before acting on an alert.
- Block agent access to known darknet market domains or Tor-based endpoints at the network layer where feasible.

## Known benign look-alikes

- Researchers/journalists describing seized darknet markets like AlphaBay
- Law-enforcement descriptions of how drug smuggling is detected
- Ordering legal goods from Amazon

## References

- https://agentthreatrule.org/en/rules/ATR-2026-01833
- https://github.com/ai-safety-institute/AgentHarm

---
Source: https://www.netzilo.com/threats/atr-darknet-controlled-substance-procurement