Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 1
Tags
cmtmf-attack-pattern: Resource Hijacking
country: Netherlands
attack-pattern: Data Model Cloud Account - T1087.004 Cloud Account - T1136.003 Create Cloud Instance - T1578.002 Create Snapshot - T1578.001 Credentials - T1589.001 Delete Cloud Instance - T1578.003 Modify Cloud Compute Configurations - T1578.005 Modify Cloud Compute Infrastructure - T1578 Remote Data Staging - T1074.002 Resource Hijacking - T1496 Revert Cloud Instance - T1578.004 Revert Cloud Instance - T1536 Server - T1583.004 Server - T1584.004 Social Media - T1593.001 Software - T1592.002 Ssh - T1021.004 Unused/Unsupported Cloud Regions - T1535 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID d6e529eb-305a-456c-ad99-d6e0490325c9
Fingerprint 3c234b90cdbe83c5
Analysis status DONE
Considered CTI value 1
Text language
Published May 6, 2024, 9:25 p.m.
Added to db Aug. 31, 2024, 1:10 a.m.
Last updated Sept. 23, 2024, 6:31 p.m.
Headline Overview of the Technique
Title Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 1
Detected Hints/Tags/Attributes 102/3/2
Source URLs
Redirection Url
Details Source https://permiso.io/blog/unmasking-adversary-cloud-defense-evasion-strategies-modify-cloud-compute-infrastructure-part-1
URL Provider
Details Provider Source level domain
Details permiso.io permiso.io
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 193 ✔ Cloud Chronicles https://permiso.io/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details MITRE ATT&CK Techniques 11 
T1578
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 20 
DEV-0537