THREAT OPS › Threat News › Modern Attack Vectors | Recorded Future
Modern Attack Vectors | Recorded Future
<h2>Key Takeaways</h2> <ul> <li>Modern threat actors have <a href="http://fbi.gov/contact-us/field-offices/atlanta/news/cybercriminals-are-stealing-cookies-to-bypass-multifactor-authentication">shifted from brute-forcing firewalls to compromising digital identities</a> via stolen session cookies and credential stuffing to bypass MFA entirely</li> <li>Adversaries <a href
MITRE ATT&CK techniques
- SharepointT1213.002
- VulnerabilitiesT1588.006
- Social EngineeringT1684
- Code RepositoriesT1593.003
- Credential StuffingT1110.004
- Multi-Factor AuthenticationT1556.006
- CredentialsT1589.001
- Code RepositoriesT1213.003
- Generative AIAML.T0016.002
- Code RepositoriesAML.T0095.000
Indicators of compromise
- http://fbi.gov/contact-us/field-offices/atlanta/news/cybercriminals-are-stealing-cookies-to-bypass-multifactor-authenticationurl
- https://www.sygnia.co/threat-reports-and-advisories/defending-your-network-edge-against-the-next-zero-day-exploit/url
- https://www.cybersecuritydive.com/news/cisa-security-software-supply-chain-compromises-GitHub/821487/url
- https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-reporturl
- https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/edge-under-siege-how-state-sponsored-actors-exploit-your-perimeterurl
Original source: https://www.recordedfuture.com/blog/modern-attack-vectors