Network Sniffing T1040
Adversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network. Network sniffing refers to using the network interface on a system to monitor or capture information sent over a wired or wireless connection. An…
- Tactics
- Credential Access, Discovery
- Actors using it
- 8
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Salt TyphoonChina · 43 techniques
- UNC3886China · 37 techniques
- APT33Iran · HOLMIUM, Elfin, Peach Sandstorm · 23 techniques
- Velvet Ant22 techniques
- DarkVishnya10 techniques