自动化接入 · API / MCP EN

技术说明 · T1583.003

Virtual Private Server

Adversaries may rent Virtual Private Servers (VPSs) that can be used during targeting. There exist a variety of cloud service providers that will sell virtual machines/containers as a service. By utilizing a VPS, adversaries can make it difficult to physically tie back operations to them. The use of cloud infrastructure can also make it easier for adversaries to rapidly provision, modify, and shut down their infrastructure. Acquiring a VPS for use in later stages of the adversary lifecycle, such as Command and Control, can allow adversaries to benefit from the ubiquity and trust associated with higher reputation cloud service providers. Adversaries may also acquire infrastructure from VPS service providers that are known for renting VPSs with minimal registration information, allowing for more anonymous acquisitions of infrastructure.

ATT&CK T1583.003 platforms — 状态 有效 版本 20.1

Adversaries may rent Virtual Private Servers (VPSs) that can be used during targeting. There exist a variety of cloud service providers that will sell virtual machines/containers as a service. By utilizing a VPS, adversaries can make it difficult to physically tie back operations to them. The use of cloud infrastructure can also make it easier for adversaries to rapidly provision, modify, and shut down their infrastructure. Acquiring a VPS for use in later stages of the adversary lifecycle, such as Command and Control, can allow adversaries to benefit from the ubiquity and trust associated with higher reputation cloud service providers. Adversaries may also acquire infrastructure from VPS service providers that are known for renting VPSs with minimal registration information, allowing for more anonymous acquisitions of infrastructure.1

  1. TrendmicroHideoutsLease

使用该技术的组织

组织名称国家
grp_g1043BlackByte—
grp_g1035Winter Vivern—
grp_g1041Sea Turtle—
grp_g1045Salt Typhoon—
grp_g0035DragonflyRussia
grp_g0001AxiomChina
grp_g1044APT42Iran
grp_g1036Moonstone SleetDPRK
grp_g1004LAPSUS$—
grp_g1052Contagious Interview—
grp_g1012CURIUMIran
grp_g1055VOID MANTICORE—
grp_g0082APT38DPRK
grp_g1059NIMBUS MANTICORE—
grp_g0099APT-C-36—
grp_g0047Gamaredon GroupRussia
grp_g0125HAFNIUM—
grp_g1003Ember BearRussia
grp_g0007APT28Russia

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核;置信度与有效期按引用读取。