Technique
№ 019 · class: privileges
Lateral Movement
Lateral movement involves an attacker moving from one compromised system to another within the same network. The goal is to expand access to systems containing more valuable data or enabling further escalation.
Term
description · examples · notesLateral movement involves an attacker moving from one compromised system to another within the same network. The goal is to expand access to systems containing more valuable data or enabling further escalation.
Description
Attackers use stolen credentials, password hashes, authentication tokens, or exploit trust relationships between systems to move through the network.
Examples
- Using an administrator password hash to access other domain servers
- Accessing shared resources using a stolen authentication token
- Exploiting trust relationships between servers to move to another network segment
Notes
- Network segmentation and monitoring inter-system authentications significantly hinder lateral movement.
Mentioned in the news
Threats
used by 8Threats that use it. Select one to open its page.