Abuse Elevation Control Mechanism T1548
Adversaries may circumvent mechanisms designed to control privilege elevation to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific…
- Tactics
- Privilege Escalation
- Actors using it
- 13
- Sub-techniques
- 4
Ransomware groups reported using it
Threat actors
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Medusa Group52 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- Salt TyphoonChina · 43 techniques
- UNC3886China · 37 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Earth LuscaChina · TAG-22, Charcoal Typhoon, CHROMIUM · 34 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- Cobalt GroupGOLD KINGSWOOD, Cobalt Gang, Cobalt Spider · 26 techniques
- APT37North Korea · InkySquid, ScarCruft, Reaper · 25 techniques
- Evilnum11 techniques