Common Information
Type Value
Value
Search Victim-Owned Websites
Category Attack-Pattern
Type Mitre-Atlas-Attack-Pattern
Misp Type Cluster
Description Adversaries may search websites owned by the victim for information that can be used during targeting. Victim-owned websites may contain technical details about their ML-enabled products or services. Victim-owned websites may contain a variety of details, including names of departments/divisions, physical locations, and data about key employees such as names, roles, and contact info. These sites may also have details highlighting business operations and relationships. Adversaries may search victim-owned websites to gather actionable information. This information may help adversaries tailor their attacks (e.g. [Adversarial ML Attacks](/techniques/AML.T0017.000) or [Manual Modification](/techniques/AML.T0043.003)). Information from these sources may reveal opportunities for other forms of reconnaissance (e.g. [Search for Victim's Publicly Available Research Materials](/techniques/AML.T0000) or [Search for Publicly Available Adversarial Vulnerability Analysis](/techniques/AML.T0001))
Details Published Attributes CTI Title
Details Website 2024-10-12 14 CTF Write-up: T1598.002 (Certified Cyber Defenders)
Details Website 2024-10-09 22 APT 40 Advisory PRC MSS Tradecraft In Action Summary
Details Website 2024-04-04 67 BlueDuck: an(other) Infostealer Coveting Digital Marketing Agencies’ Facebook Business Accounts
Details Website 2023-10-24 36 Dealing with MITRE ATT&CK®’s different levels of detail
Details Website 2023-07-25 6 APT Profile: Kimsuky - SOCRadar® Cyber Intelligence Inc.
Details Website 2023-07-21 0 Applying MITRE ATT&CK to Web3
Details Website 2023-04-20 481 ATT&CK Changes
Details Website 2023-03-22 9 APT Profile: Sandworm - SOCRadar® Cyber Intelligence Inc.
Details Website 2023-03-02 199 Russia/Ukraine Update - February 2023
Details Website 2021-05-10 47 IcedID Banking Trojan Malware Threat Intel Advisory | Threat Intelligence | CloudSEK
Details Website 2021-01-14 663 Higaisa or Winnti? APT41 backdoors, old and new