Initial Access 22 articles

Overview Brute Force Authentication Attempts involve systematically trying numerous username and password combinations to gain unauthorized access to accounts or systems. This technique is commonly employed during the Initial Access…

Overview Compromised software updates involve adversaries injecting malicious code into legitimate software update mechanisms to distribute malware or gain unauthorized access. This technique plays a critical role in the attack…

Overview Compromised VPN access is a technique where adversaries gain unauthorized entry into a network by exploiting valid VPN credentials or vulnerabilities in VPN infrastructure. This technique is often used…

Overview Credential stuffing attacks involve the automated injection of breached username and password pairs into login portals to gain unauthorized access. This technique is commonly used during the Initial Access…

Overview Drive-By Compromise is a technique where adversaries exploit vulnerabilities in websites or web content to deliver malicious payloads to visitors without their knowledge. It typically occurs during the initial…

Overview Exploitation of public-facing applications is a technique where adversaries target internet-accessible software to gain unauthorized access or execute malicious actions. This technique plays a critical role in the initial…

Overview Exploitation of web application vulnerabilities is a technique used by adversaries to gain unauthorized access, execute code, or manipulate data within a target system. This technique plays a critical…

Overview Exposed API keys and secrets refer to the inadvertent disclosure of sensitive credentials used to authenticate and authorize access to applications, services, or infrastructure. This technique is leveraged by…

Overview Exposed cloud service misconfigurations occur when cloud resources are improperly configured, unintentionally allowing unauthorized access or excessive privileges. This technique is leveraged by adversaries to gain initial access, escalate…

Overview Insider-Assisted Initial Access is a technique where adversaries leverage cooperation, coercion, or compromise of trusted insiders to gain entry into a target environment. This approach facilitates bypassing perimeter defenses…

Overview Malvertising-Based Initial Access is a technique where adversaries leverage malicious online advertisements to deliver malware or redirect users to compromised websites as an entry point into a target environment.…

Overview Password spraying attacks are a credential-based technique where adversaries attempt to gain unauthorized access by systematically trying a small set of commonly used passwords against many user accounts. This…

Overview Phishing (Credential Harvesting) is a social engineering technique used by adversaries to obtain sensitive authentication information such as usernames and passwords. It plays a critical role in the initial…

Overview Phishing (Link-Based Payload Delivery) is a social engineering technique where adversaries send deceptive messages containing malicious links to lure victims into initiating harmful actions. This technique is commonly used…

Overview Phishing involving malicious attachments is a technique where adversaries deliver harmful files within seemingly legitimate emails or messages to compromise target systems. This method plays a critical role in…

Overview Remote Desktop Protocol (RDP) abuse is a technique where adversaries exploit legitimate RDP services to gain unauthorized access to systems. It is commonly used across multiple stages of the…

Overview Spear phishing via trusted relationships is a targeted social engineering technique where adversaries exploit existing interpersonal or organizational trust to deliver malicious content or requests. This technique is often…

Overview Supply Chain Initial Compromise is a technique where adversaries infiltrate a target environment by exploiting vulnerabilities or trust relationships within third-party suppliers, vendors, or service providers. This approach enables…

Overview Trojanized software installers are legitimate-looking installation packages that have been modified to include malicious code. Adversaries use this technique to gain initial access, execute payloads, and maintain persistence by…

Overview USB-Based Initial Access is a technique where adversaries leverage removable USB storage devices to gain unauthorized entry into a target environment. This method is often used during the initial…