自动化接入 · API / MCP EN

技术说明 · T1555

Credentials from Password Stores

Adversaries may search for common password storage locations to obtain user credentials. Passwords are stored in several places on a system, depending on the operating system or application holding the credentials. There are also specific applications and services that store passwords to make them easier for users to manage and maintain, such as password managers and cloud secrets vaults. Once credentials are obtained, they can be used to perform lateral movement and access restricted information.

ATT&CK T1555 platforms — 状态 有效 版本 20.1

Adversaries may search for common password storage locations to obtain user credentials.1 Passwords are stored in several places on a system, depending on the operating system or application holding the credentials. There are also specific applications and services that store passwords to make them easier for users to manage and maintain, such as password managers and cloud secrets vaults. Once credentials are obtained, they can be used to perform lateral movement and access restricted information.

  1. F-Secure The Dukes

使用该技术的组织

组织名称国家
grp_g0120Evilnum—
grp_g0038Stealth Falcon—
grp_g1001HEXANE—
grp_g1026Malteiro—
grp_g0064APT33Iran
grp_g0037FIN6—
grp_g0077LeafminerIran
grp_g0049OilRigIran
grp_g0069MuddyWater—
grp_g1017Volt Typhoon—
grp_g0082APT38DPRK
grp_g0087APT39—
grp_g0096APT41China

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核;置信度与有效期按引用读取。