Attack - Revision history

Tom: /* MITRE ATT&CK */

2025-03-27T22:08:04Z

‎MITRE ATT&CK

2024-09-16T19:42:14Z

‎Models

2024-09-14T23:58:03Z

‎Models

2024-09-13T16:46:16Z

‎Models

2024-09-13T16:43:12Z

‎Models

2024-09-13T16:37:09Z

‎Models

2024-04-16T04:38:38Z

‎MITRE ATT&CK

2024-04-16T04:28:09Z

‎References

2024-03-14T02:02:46Z

‎Models

2024-03-14T00:01:33Z

‎Models

@@ Line 24: / Line 24: @@
 ==MITRE ATT&CK==
+Users in more than 190 countries access [https://click.e.mitre.org/?qs=38bb944c8d8e6c662c0cf9c4b5e8e4f81e4201f09e741314f769d3e559042e43c673503556dc52659670eaa164174489323d2dbd4d3a32ab MITRE ATT&CK®] — a global knowledge base of cyber adversary behavior. This free online data-sharing platform—considered “foundational” to the worldwide cybersecurity community—enables any size organization to identify attackers by their tactics and techniques and outmaneuver cyber intruders. Keeping up with the bad guys: ATT&CK’s newest update (version 17) goes live on April 22. It will include content related to the ESXi hypervisor, broad improvements to defenses, and updates to techniques, groups, and software across the framework.
 * [https://www.darkreading.com/vulnerabilities-threats/dprk-exploits-mitre-sub-techniques-phantom-dll-hijacking-tcc-abuse DPRK Exploits 2 MITRE Sub-Techniques: Phantom DLL Hijacking, TCC Abuse] 2024-04-11

@@ Line 21: / Line 21: @@
 * Man-in-the-middle attack (MitM; active attacker positions himself between the communication partners and pretends to be the respective counter-party)
 * Credential theft
-* Spoofing and masquerading (which seems to become easier for attacks based on [[Artificial Intelligence]] bots)
+* [[Spoofing]] and masquerading (which seems to become easier for attacks based on [[Artificial Intelligence]] bots)
 ==MITRE ATT&CK==

@@ Line 10: / Line 10: @@
 [[Threat Model]]s some in a variety of forms. This page considers the use of an [[Attack]] model to expose threats. While this [[Attack]] model can be helpful in accessing vulnerabilities that are currently known, it is backward looking and does not address vulnerabilities that are not currently known to be under [[Attack]].
-* [https://www.cisa.gov/resources-tools/resources/risk-and-vulnerability-assessments Risk and Vulnerability Assessments] CISA 2024-09-13
+* [https://www.cisa.gov/resources-tools/resources/risk-and-vulnerability-assessments Risk and Vulnerability Assessments] CISA 2024-09-13 and [https://www.cisa.gov/news-events/alerts/2024/09/13/cisa-releases-analysis-fy23-risk-and-vulnerability-assessments updated press release].
 Threat Models are assessed according models like the ISO 29115 standard (ISO/IEC JTC 1/SC 27 2013), which describes standardized attack vectors for an IT system:

@@ Line 8: / Line 8: @@
 ==Models==
-[[Threat Model]]s some in a variety of forms. The page considers the use of an [[Attack]] model to expose threats. While this [[Attack]] model can be helpful in accessing vulnerabilities that are currently known, it is backward looking and does not address vulnerabilities that are not under [[Attack]].
+[[Threat Model]]s some in a variety of forms. This page considers the use of an [[Attack]] model to expose threats. While this [[Attack]] model can be helpful in accessing vulnerabilities that are currently known, it is backward looking and does not address vulnerabilities that are not currently known to be under [[Attack]].
-* {https://www.cisa.gov/resources-tools/resources/risk-and-vulnerability-assessments Risk and Vulnerability Assessments] CISA 2024-09-13
+* [https://www.cisa.gov/resources-tools/resources/risk-and-vulnerability-assessments Risk and Vulnerability Assessments] CISA 2024-09-13
 Threat Models are assessed according models like the ISO 29115 standard (ISO/IEC JTC 1/SC 27 2013), which describes standardized attack vectors for an IT system:

@@ Line 10: / Line 10: @@
 [[Threat Model]]s some in a variety of forms. The page considers the use of an [[Attack]] model to expose threats. While this [[Attack]] model can be helpful in accessing vulnerabilities that are currently known, it is backward looking and does not address vulnerabilities that are not under [[Attack]].
-{https://www.cisa.gov/resources-tools/resources/risk-and-vulnerability-assessments Risk and Vulnerability Assessments] CISA 2024-09-13
+* {https://www.cisa.gov/resources-tools/resources/risk-and-vulnerability-assessments Risk and Vulnerability Assessments] CISA 2024-09-13
 Threat Models are assessed according models like the ISO 29115 standard (ISO/IEC JTC 1/SC 27 2013), which describes standardized attack vectors for an IT system:

@@ Line 12: / Line 12: @@
 * Credential duplication (copy of credentials and their keys)
 * Phishing (interception of credentials via fake websites/emails and social manipulation)
-* Eavesdropping
+* Eavesdropping/snooping
 * Replay attack (reuse of recorded messages)
 * Session hijacking