Valid Accounts T1078
Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to bypass access controls placed on various resources on systems within the network and may even be…
- Tactics
- Stealth, Persistence, Privilege Escalation, Initial Access
- Actors using it
- 70
- Sub-techniques
- 3
Ransomware groups reported using it
N0nthegentlemenqilinincransomakiraSilentRansomGroupsafepayplayeverestOrovapearnightspiresarcomaclop
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Medusa Group52 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- ChimeraChina · 49 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- BlackByteHecamede · 44 techniques
- Salt TyphoonChina · 43 techniques
- FIN13Elephant Beetle · 42 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- ShinyHuntersUNC6240, Bling Libra · 39 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- HAFNIUMChina · Operation Exchange Marauder, Silk Typhoon · 37 techniques
- UNC3886China · 37 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium · 37 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- Storm-050134 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- LAPSUS$DEV-0537, Strawberry Tempest · 32 techniques
- Fox KittenIran · UNC757, Parisite, Pioneer Kitten · 31 techniques
- FIN8Syssphinx · 31 techniques
- TeamPCPPCPCat, ShellForce, DeadCatx3 · 30 techniques
- Indrik SpiderRussia · Evil Corp, Manatee Tempest, DEV-0243 · 27 techniques
- GALLIUMChina · Granite Typhoon · 27 techniques
- Aquatic PandaChina · 25 techniques
- INC RansomGOLD IONIC · 25 techniques
- SilenceWhisper Spider · 25 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- ToddyCat24 techniques
- APT33Iran · HOLMIUM, Elfin, Peach Sandstorm · 23 techniques
- Sea TurtleTürkiye · Teal Kurma, Marbled Dust, Cosmic Wolf · 22 techniques
- APT5China · Mulberry Typhoon, MANGANESE, BRONZE FLEETWOOD · 22 techniques
- Velvet Ant22 techniques
- Play22 techniques
- AgriusIran · Pink Sandstorm, AMERICIUM, Agonizing Serpens · 20 techniques
- AkiraGOLD SAHARA, PUNK SPIDER, Howling Scorpius · 17 techniques
- Cinnamon TempestChina · DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT · 16 techniques
- Star BlizzardRussia · SEABORGIUM, Callisto Group, TA446 · 16 techniques
- AxiomChina · Group 72 · 15 techniques
- NaikonChina · 13 techniques
- The GentlemenStorm-2697, GOLD SHERWOOD · 13 techniques
- APT18TG-0416, Dynamite Panda, Threat Group-0416 · 11 techniques
- FIN511 techniques
- Silent LibrarianIran · TA407, COBALT DICKENS · 10 techniques
- FIN49 techniques
- PROMETHIUMStrongPity · 9 techniques
- FIN109 techniques
- CarbanakAnunak · 8 techniques
- POLONIUMLebanon · Plaid Rain · 7 techniques
- SuckflyChina · 5 techniques
- Threat Group-1314TG-1314 · 4 techniques
- PittyTiger2 techniques