norosha
Attack Atlas
Model threat profile

Llama

How agents fingerprinted to the Llama family behave against our bait. Fingerprinting infers the most likely model family from behaviour; it is probabilistic, not attribution of a specific vendor deployment.

Detections
9
Confirmed
5
Avg. confidence
85%
Bait types
4

Most effective bait against Llama

Honey skill4 · 44%
On-chain bait2 · 22%
Decoy MCP2 · 22%
Decoy doc1 · 11%

Recent detections

IDSeverityBaitRegionConf.
NRS-4010ConfirmedOn-chain baitToronto, CA98%
NRS-4092SuspectedDecoy docCape Town, ZA82%
NRS-4088ConfirmedDecoy MCPCape Town, ZA90%
NRS-4090ConfirmedHoney skillCape Town, ZA91%
NRS-4091SuspectedHoney skillCape Town, ZA89%
NRS-4089WatchHoney skillCape Town, ZA83%
NRS-4087ConfirmedHoney skillCape Town, ZA84%
NRS-4086SuspectedDecoy MCPCape Town, ZA73%
NRS-4003ConfirmedOn-chain baitFrankfurt, DE75%
Tailored to you

Track Llama activity against your stack.

Filter the feed to the models that matter to you, and get alerted when one touches your assets. Enterprise adds bait deployed inside your own environment.