166 terms · 75/46/45
Technique № 033 · class: exfiltration / impact

Service Abuse

Service abuse as a technique involves using legitimate system functionalities in unintended ways to cause damage, gain unauthorized access, or achieve financial gain.

Term

description · examples · notes

Service abuse as a technique involves using legitimate system functionalities in unintended ways to cause damage, gain unauthorized access, or achieve financial gain.

Description

Unlike vulnerability exploitation, the attacker does not use code flaws but abuses the normal behavior of services. This makes detection difficult because the activities themselves are considered legitimate.

Examples

  • Mass creation of fake accounts to exhaust platform resources
  • Abusing a free service tier for cryptocurrency mining
  • Using a password reset feature to send thousands of emails to a victim

Notes

  • Servis radi kako je projektovan; zloupotreba se vidi u nameni, zbiru i obrascu.
  • Ovde se koristi platforma treće strane, a ne alat zatečen u mreži žrtve.

Mentioned in the news

tags
impact
◳Composite

Threats

used by 3

Threats that use it. Select one to open its page.

Defenses

countered by 4

How it is countered. Select one to open its page.