Email Collection T1114
Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Emails may also contain details of ongoing incident response operations, which may allow adversaries to…
- Tactics
- Collection
- Actors using it
- 23
- Sub-techniques
- 3
Ransomware groups reported using it
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- ChimeraChina · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- HAFNIUMChina · Operation Exchange Marauder, Silk Typhoon · 37 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- RedCurlRussia · 32 techniques
- LAPSUS$DEV-0537, Strawberry Tempest · 32 techniques
- Sea TurtleTürkiye · Teal Kurma, Marbled Dust, Cosmic Wolf · 22 techniques
- Winter VivernTA473, UAC-0114 · 22 techniques
- WIRTEAshen Lepus · 21 techniques
- APT1China · Comment Crew, Comment Group, Comment Panda · 20 techniques
- Star BlizzardRussia · SEABORGIUM, Callisto Group, TA446 · 16 techniques
- LeafminerIran · Raspite · 14 techniques
- Silent LibrarianIran · TA407, COBALT DICKENS · 10 techniques
- FIN49 techniques