Key Mitre ATT&CKTechniques Used By Cyber Attackers
HelpNet Security, Friday, March 15th, 2024
While the threat landscape continues to shift and evolve, attackers' motivations do not, according to a Red Canary report. The classic tools and techniques adversaries deploy remain consistent-with some notable exceptions.
The report tracked MITRE ATT&CK techniques that adversaries abuse most frequently throughout the year, and two new and notable entries soared to the top 10 in 2023: email forwarding rule and cloud accounts.
Why do adversaries abuse cloud accounts?
Cloud account compromises are increasing in prevalence as organizations embrace software-as-a-service (SaaS) for critical productivity applications like email, file storage, and messaging, resulting in a substantial volume of data now being stored in the cloud. This shift is mirrored by adversaries too, who are finding just as much value in compromising cloud identities as they have historically in traditional endpoints.