Password Managers

Adversaries may acquire user credentials from third-party password managers.¹ Password managers are applications designed to store user credentials, normally in an encrypted database. Credentials are typically accessible after a user provides a master password that unlocks the database. After the database is unlocked, these credentials may be copied to memory. These databases can be stored as files on disk.² Adversaries may acquire user credentials from password managers by extracting the master password and/or plain-text credentials from memory.³⁴ Adversaries may extract credentials from memory via Exploitation for Credential Access.⁵ Adversaries may also try brute forcing via Password Guessing to obtain the master password of a password manager.⁶

1. ise Password Manager February 2019
2. ise Password Manager February 2019
3. FoxIT Wocao December 2019
4. Github KeeThief
5. NVD CVE-2019-3610
6. Cyberreason Anchor December 2019

使用该技术的组织

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核；置信度与有效期按引用读取。