Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Emails may also contain details of ongoing incident response operations, which may allow adversaries to adjust their techniques in order to maintain persistence or evade defenses.12 Adversaries can collect or forward email from mail servers or clients.
- TrustedSec OOB Communications
- CISA AA20-352A 2021
使用该技术的组织
| 组织 | 名称 | 国家 |
|---|---|---|
| grp_g0122 | Silent Librarian | — |
| grp_g1015 | Scattered Spider | — |
| grp_g0059 | Magic Hound | Iran |
| grp_g1003 | Ember Bear | Russia |
断言
尚无指向该技术的公开断言。
记录自动入库·未人工复核；置信度与有效期按引用读取。