The Credential Abuse Cycle: Theft, Trade, and Exploitation - ReliaQuest
Tags
country: China France Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Cloud Accounts - T1078.004 Cloud Accounts - T1585.003 Cloud Accounts - T1586.003 Credential Stuffing - T1110.004 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Email Addresses - T1589.002 Golden Ticket - T1558.001 Impersonation - T1656 Internal Spearphishing - T1534 Ip Addresses - T1590.005 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Password Managers - T1555.005 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Man In The Browser - T1185 Powershell - T1086 Valid Accounts - T1078 Valid Accounts
Show in Graph
Common Information
Type Value
UUID db5080e5-7b6b-428e-84a0-98a331133515
Fingerprint bec049db0b12d14d
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 5, 2024, 8:24 a.m.
Added to db Nov. 5, 2024, 3:36 p.m.
Last updated Nov. 16, 2024, 8:07 p.m.
Headline The Credential Abuse Cycle: Theft, Trade, and Exploitation
Title The Credential Abuse Cycle: Theft, Trade, and Exploitation - ReliaQuest
Detected Hints/Tags/Attributes 118/3/4
Source URLs
Redirection Url
Details Source https://www.reliaquest.com/blog/the-credential-abuse-cycle-theft-trade-and-exploitation/
Details Source https://malware.news/t/the-credential-abuse-cycle-theft-trade-and-exploitation/88121
URL Provider
Details Provider Source level domain
Details malware.news malware.news
Details reliaquest.com www.reliaquest.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Details 362 ✔ Blog – ReliaQuest https://www.reliaquest.com/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Mandiant Uncategorized Groups 31 
UNC5537
Details MITRE ATT&CK Techniques 34 
T1078.004
Details MITRE ATT&CK Techniques 83 
T1534
Details Threat Actor Identifier - APT 143 
APT40