External Remote Services T1133
Adversaries may leverage external-facing remote services to initially access and/or persist within a network. Remote services such as VPNs, Citrix, and other access mechanisms allow users to connect to internal enterprise network resources from external locations. There are often remote service…
- Tactics
- Persistence, Initial Access
- Actors using it
- 28
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- ChimeraChina · 49 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- TeamTNT43 techniques
- FIN13Elephant Beetle · 42 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium · 37 techniques
- LAPSUS$DEV-0537, Strawberry Tempest · 32 techniques
- GALLIUMChina · Granite Typhoon · 27 techniques
- APT-C-36Blind Eagle, TAG-144, AguilaCiega · 25 techniques
- Sea TurtleTürkiye · Teal Kurma, Marbled Dust, Cosmic Wolf · 22 techniques
- Velvet Ant22 techniques
- Play22 techniques
- AkiraGOLD SAHARA, PUNK SPIDER, Howling Scorpius · 17 techniques
- APT18TG-0416, Dynamite Panda, Threat Group-0416 · 11 techniques
- FIN511 techniques
- GOLD SOUTHFIELDPinchy Spider · 9 techniques