Promptware

A term (Ben Nassi, Bruce Schneier, Oleg Brodt; 2026) framing attacks on LLM applications as a new class of malware. It shifts the discussion from isolated prompt injection to a full kill chain: initial access, privilege escalation, persistence, lateral movement. An analysis of 36 papers found that at least 21 attacks traverse four or more stages.