Adversaries may search for common password storage locations to obtain user credentials.1 Passwords are stored in several places on a system, depending on the operating system or application holding the credentials. There are also specific applications and services that store passwords to make them easier for users to manage and maintain, such as password managers and cloud secrets vaults. Once credentials are obtained, they can be used to perform lateral movement and access restricted information.
- F-Secure The Dukes
使用该技术的组织
| 组织 | 名称 | 国家 |
|---|---|---|
| grp_g0120 | Evilnum | — |
| grp_g0038 | Stealth Falcon | — |
| grp_g1001 | HEXANE | — |
| grp_g1026 | Malteiro | — |
| grp_g0064 | APT33 | Iran |
| grp_g0037 | FIN6 | — |
| grp_g0077 | Leafminer | Iran |
| grp_g0049 | OilRig | Iran |
| grp_g0069 | MuddyWater | — |
| grp_g1017 | Volt Typhoon | — |
| grp_g0082 | APT38 | DPRK |
| grp_g0087 | APT39 | — |
| grp_g0096 | APT41 | China |
断言
尚无指向该技术的公开断言。
记录自动入库·未人工复核;置信度与有效期按引用读取。