Credentials from Password Stores T1555
Adversaries may search for common password storage locations to obtain user credentials. Passwords are stored in several places on a system, depending on the operating system or application holding the credentials. There are also specific applications and services that store passwords to make them…
- Tactics
- Credential Access
- Actors using it
- 37
- Sub-techniques
- 3
Ransomware groups reported using it
thegentlemenqilinakirasafepaypear
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- HAFNIUMChina · Operation Exchange Marauder, Silk Typhoon · 37 techniques
- UNC3886China · 37 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Contagious InterviewDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan · 34 techniques
- Storm-050134 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- RedCurlRussia · 32 techniques
- LAPSUS$DEV-0537, Strawberry Tempest · 32 techniques
- Fox KittenIran · UNC757, Parisite, Pioneer Kitten · 31 techniques
- TeamPCPPCPCat, ShellForce, DeadCatx3 · 30 techniques
- APT42Iran · 29 techniques
- HEXANELyceum, Siamesekitten, Spirlin · 29 techniques
- Indrik SpiderRussia · Evil Corp, Manatee Tempest, DEV-0243 · 27 techniques
- ZIRCONIUMChina · APT31, Violet Typhoon · 25 techniques
- APT37North Korea · InkySquid, ScarCruft, Reaper · 25 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- APT33Iran · HOLMIUM, Elfin, Peach Sandstorm · 23 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- LeafminerIran · Raspite · 14 techniques
- Stealth Falcon13 techniques
- MoleratsOperation Molerats, Gaza Cybergang · 12 techniques
- Evilnum11 techniques
- MalteiroBrazil · 11 techniques
- Ajax Security TeamIran · Operation Woolen-Goldfish, AjaxTM, Rocket Kitten · 5 techniques