Google Workspace Attack Surface — Elastic Security Labs
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Model Additional Cloud Roles - T1098.003 Bidirectional Communication - T1102.002 Bidirectional Communication - T1481.002 Cloud Accounts - T1078.004 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Internal Spearphishing - T1534 Javascript - T1059.007 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Saml Tokens - T1606.002 Server - T1583.004 Server - T1584.004 Unsecured Credentials - T1552 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002 Connection Proxy - T1090 Data From Information Repositories - T1213 Email Collection - T1114 Indicator Removal On Host - T1070 Remote Services - T1021 Valid Accounts - T1078 Web Service - T1102 Data From Information Repositories Valid Accounts
Show in Graph
Common Information
Type Value
UUID af8531c6-4e4c-4328-b553-802064ac2174
Fingerprint af00911119b750e5
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 3, 2023, midnight
Added to db Nov. 19, 2023, 6:18 a.m.
Last updated Nov. 17, 2024, 11:36 p.m.
Headline Google Workspace Attack Surface
Title Google Workspace Attack Surface — Elastic Security Labs
Detected Hints/Tags/Attributes 111/2/15
Source URLs
Redirection Url
Details Source https://www.elastic.co/security-labs/google-workspace-attack-surface-part-one
URL Provider
Details Provider Source level domain
Details elastic.co www.elastic.co
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 306 ✔ Elastic Security Labs https://www.elastic.co/security-labs/rss/feed.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1175 
gmail.com
Details Domain 11 
script.google.com
Details MITRE ATT&CK Techniques 34 
T1078.004
Details MITRE ATT&CK Techniques 8 
T1098.003
Details MITRE ATT&CK Techniques 113 
T1552
Details MITRE ATT&CK Techniques 11 
T1606.002
Details MITRE ATT&CK Techniques 409 
T1566
Details MITRE ATT&CK Techniques 83 
T1534
Details MITRE ATT&CK Techniques 89 
T1114
Details MITRE ATT&CK Techniques 149 
T1102
Details MITRE ATT&CK Techniques 33 
T1102.002
Details MITRE ATT&CK Techniques 14 
T1584.006
Details MITRE ATT&CK Techniques 56 
T1213
Details MITRE ATT&CK Techniques 247 
T1070
Details Threat Actor Identifier - APT 665 
APT29