Investigating an Adversary-in-the-Middle (AiTM) Phishing Email
Tags
cmtmf-attack-pattern: Compromise Accounts
maec-delivery-vectors: Watering Hole
attack-pattern: Data Adversary-In-The-Middle - T1638 Adversary-In-The-Middle - T1557 Compromise Accounts - T1586 Conditional Access Policies - T1556.009 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 48328c71-962c-44d9-b3f3-5ad47a7c7f2b
Fingerprint bc5299501903ca8f
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 11, 2023, noon
Added to db Aug. 31, 2024, 10:23 a.m.
Last updated Nov. 5, 2024, 2:45 p.m.
Headline UNKNOWN
Title Investigating an Adversary-in-the-Middle (AiTM) Phishing Email
Detected Hints/Tags/Attributes 50/3/4
Source URLs
Redirection Url
Details Source https://www.optiv.com/insights/source-zero/blog/investigating-adversary-middle-aitm-phishing-email
URL Provider
Details Provider Source level domain
Details optiv.com www.optiv.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 346 ✔ Optiv Blog https://www.optiv.com/resources/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4 
greynoise.io
Details Domain 1 
34harjeh4hssdvasegwe12.ru
Details Domain 255 
www.optiv.com
Details File 263 
www.opt