自动化接入 · API / MCP EN

技术说明 · T1213.005

Messaging Applications

Adversaries may leverage chat and messaging applications, such as Microsoft Teams, Google Chat, and Slack, to mine valuable information. The following is a brief list of example information that may hold potential value to an adversary and may also be found on messaging applications: * Testing / development credentials (i.e., Chat Messages) * Source code snippets * Links to network shares and other internal resources * Proprietary data * Discussions about ongoing incident response efforts In addition to exfiltrating data from messaging applications, adversaries may leverage data from chat messages in order to improve their targeting - for example, by learning more about an environment or evading ongoing incident response efforts.

ATT&CK T1213.005 platforms — 状态 有效 版本 20.1

Adversaries may leverage chat and messaging applications, such as Microsoft Teams, Google Chat, and Slack, to mine valuable information. The following is a brief list of example information that may hold potential value to an adversary and may also be found on messaging applications: * Testing / development credentials (i.e., Chat Messages) * Source code snippets * Links to network shares and other internal resources * Proprietary data1 * Discussions about ongoing incident response efforts23 In addition to exfiltrating data from messaging applications, adversaries may leverage data from chat messages in order to improve their targeting - for example, by learning more about an environment or evading ongoing incident response efforts.45

  1. Guardian Grand Theft Auto Leak 2022
  2. SC Magazine Ragnar Locker 2021
  3. Microsoft DEV-0537
  4. Sentinel Labs NullBulge 2024
  5. Permiso Scattered Spider 2023

使用该技术的组织

组织名称国家
grp_g0117Fox Kitten—
grp_g1015Scattered Spider—
grp_g1004LAPSUS$—
grp_g0082APT38DPRK
grp_g1059NIMBUS MANTICORE—

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核；置信度与有效期按引用读取。