CyberStrikeus/CyberStrike - Page 104

t1498-network-denial-of-service

Adversaries may perform Network Denial of Service (DoS) attacks to degrade or block the availability of targeted resources to users.

t1499-001-os-exhaustion-flood

Adversaries may launch a denial of service (DoS) attack targeting an endpoint's operating system (OS).

t1499-002-service-exhaustion-flood

Adversaries may target the different network services provided by systems to conduct a denial of service (DoS).

t1499-003-application-exhaustion-flood

Adversaries may target resource intensive features of applications to cause a denial of service (DoS), denying availability to those applications.

t1499-004-application-or-system-exploitation

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.

t1499-endpoint-denial-of-service

Adversaries may perform Endpoint Denial of Service (DoS) attacks to degrade or block the availability of services to users.

t1529-system-shutdownreboot

Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems.

t1531-account-access-removal

Adversaries may interrupt availability of system and network resources by inhibiting access to accounts utilized by legitimate users.

t1561-001-disk-content-wipe

Adversaries may erase the contents of storage devices on specific systems or in large numbers in a network to interrupt availability to system and network resources.

t1561-002-disk-structure-wipe

Adversaries may corrupt or wipe the disk data structures on a hard drive necessary to boot a system; targeting specific critical systems or in large numbers in a network to interrupt availability t...

t1561-disk-wipe

Adversaries may wipe or corrupt raw disk data on specific systems or in large numbers in a network to interrupt availability to system and network resources.

t1565-001-stored-data-manipulation

Adversaries may insert, delete, or manipulate data at rest in order to influence external outcomes or hide activity, thus threatening the integrity of the data.

t1565-002-transmitted-data-manipulation

Adversaries may alter data en route to storage or other systems in order to manipulate external outcomes or hide activity, thus threatening the integrity of the data.

t1565-003-runtime-data-manipulation

Adversaries may modify systems in order to manipulate the data as it is accessed and displayed to an end user, thus threatening the integrity of the data.

t1565-data-manipulation

Adversaries may insert, delete, or manipulate data in order to influence external outcomes or hide activity, thus threatening the integrity of the data.

t1657-financial-theft

Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability o...

t1667-email-bombing

Adversaries may flood targeted email addresses with an overwhelming volume of messages.

t1583-001-domains

Adversaries may acquire domains that can be used during targeting.

t1583-002-dns-server

Adversaries may set up their own Domain Name System (DNS) servers that can be used during targeting.

t1583-003-virtual-private-server

Adversaries may rent Virtual Private Servers (VPSs) that can be used during targeting.

t1583-004-server

Adversaries may buy, lease, rent, or obtain physical servers that can be used during targeting.

t1583-005-botnet

Adversaries may buy, lease, or rent a network of compromised systems that can be used during targeting.

t1583-006-web-services

Adversaries may register for web services that can be used during targeting.

t1583-007-serverless

Adversaries may purchase and configure serverless cloud infrastructure, such as Cloudflare Workers, AWS Lambda functions, or Google Apps Scripts, that can be used during targeting.

t1583-008-malvertising

Adversaries may purchase online advertisements that can be abused to distribute malware to victims.

t1583-acquire-infrastructure

Adversaries may buy, lease, rent, or obtain infrastructure that can be used during targeting.

t1584-001-domains

Adversaries may hijack domains and/or subdomains that can be used during targeting.

t1584-002-dns-server

Adversaries may compromise third-party DNS servers that can be used during targeting.

t1584-003-virtual-private-server

Adversaries may compromise third-party Virtual Private Servers (VPSs) that can be used during targeting.

t1584-004-server

Adversaries may compromise third-party servers that can be used during targeting.

t1584-005-botnet

Adversaries may compromise numerous third-party systems to form a botnet that can be used during targeting.

t1584-006-web-services

Adversaries may compromise access to third-party web services that can be used during targeting.

t1584-007-serverless

Adversaries may compromise serverless cloud infrastructure, such as Cloudflare Workers, AWS Lambda functions, or Google Apps Scripts, that can be used during targeting.

t1584-008-network-devices

Adversaries may compromise third-party network devices that can be used during targeting.

t1584-compromise-infrastructure

Adversaries may compromise third-party infrastructure that can be used during targeting.

t1585-001-social-media-accounts

Adversaries may create and cultivate social media accounts that can be used during targeting.

t1585-002-email-accounts

Adversaries may create email accounts that can be used during targeting.

t1585-003-cloud-accounts

Adversaries may create accounts with cloud providers that can be used during targeting.

t1585-establish-accounts

Adversaries may create and cultivate accounts with services that can be used during targeting.

t1586-001-social-media-accounts

Adversaries may compromise social media accounts that can be used during targeting.