kompozit · edukator režim · za predavanje i PDF
Credential Abuse
Tehnika u centru, pretnje koje je koriste levo, odbrane koje je suzbijaju desno. Ispod kartice — profil tehnike: gde se javlja i kako se prepoznaje.
← Threats that use it40
Threats that use it. Klik vodi na stranicu pojma.
- Infostealer→
- Spear Phishing→
- Account Takeover→
- Phishing→
- Business Email Compromise→
- Backdoor→
- Insider Threat→
- Trojan→
- Privilege Escalation→
- Credential stuffing→
- Cloud IAM misconfiguration→
- Shadow IT→
- Whaling→
- SMS phishing - Smishing→
- Authentication Bypass→
- SQL Injection→
- Token Theft→
- Brute-force attack→
- IoT Device Compromise→
- Session Hijacking→
- API Abuse→
- Password spraying→
- Third-Party Compromise→
- SSRF→
- Shared Account Abuse→
- Pass-the-Hash→
- Cross-Site Scripting→
- MFA Fatigue→
- SIM Swapping→
- Evil Twin→
- Privilege Misuse→
- QR phishing - Quishing→
- Contractor Abuse→
- Deepfake Attack→
- Pretexting→
- Service Abuse→
- voice phishing - Vishing→
- Kerberoasting→
- Physical Access Attack→
- Cross-Site Request Forgery→
technique · № 003 · initial access
Credential Abuse
Credential abuse involves using stolen, leaked, or otherwise obtained login data to gain unauthorized access to systems and services. The attacker impersonates a legitimate user.
→ profil tehnike · gde se javlja i kako se prepoznaje
faza lancaPočetni pristup
MITRE ATT&CKT1078
detekcijaSumnju bude prijave sa novih uređaja i lokacija, rad van uobičajenog vremena, pristup novim servisima i neočekivane privilegovane radnje. Dve udaljene prijave u vremenu koje ne dopušta putovanje posebno su jak signal.
učestalostVrlo česta kao početni pristup poslovnim sistemima. Posebno se viđa kod VPN-a, servisa u oblaku i udaljene administracije.
↗ How it is countered15
How it is countered. Klik vodi na stranicu pojma.
- Logging & Monitoring→
- Identity & Access Management→
- Multi-Factor Authentication→
- Security Awareness→
- Privileged Access Management→
- Password Manager→
- Virtual Private Network→
- Zero Trust→
- Mobile Device Security→
- Security Policies→
- Deception Technology→
- Regulatory Compliance→
- Secrets Management→
- Security Champions→
- Certificate Management→