TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

F5 Labs

Digital Identity Is an Increasingly Popular Attack Vector for Cybercriminals

2020-08-13 · Read original ↗

ATT&CK techniques detected

5 predictions
T1589.001Credentials
65%
“one - time passwords, credit card number, and so on. - phishing and smishing : fraudsters use email or mobile channels ( text messages ) to pose as a genuine entity or website and lure victims into voluntarily providing personal or confidential information so they can then impers…”
T1556.006Multi-Factor Authentication
47%
“done using a combination of the following factors : - something the user knows ( such as a password, passphrase, or pin ) - something the user has ( such as a token generator ) - something the user is ( a biometric factor, such as a fingerprint, voiceprint, or iris scan ) dependi…”
T1556.006Multi-Factor Authentication
33%
“frequent attack focus for abuse. fraudsters have figured out ways to carry out different malicious schemes at each stage of the identity life cycle ( see figure 1 ). in most cases, the end goal is to steal data or procure services intended only for the authorized user. digital id…”
T1586.002Email Accounts
33%
“group misrepresents their identity data or provides false information to gain an advantage or derive some services for which they are not otherwise eligible. - mule accounts : in this method, a user creates an account and passes the information to cybercriminals in exchange for s…”
T1657Financial Theft
30%
“one - time passwords, credit card number, and so on. - phishing and smishing : fraudsters use email or mobile channels ( text messages ) to pose as a genuine entity or website and lure victims into voluntarily providing personal or confidential information so they can then impers…”

Summary

As cybercriminals continue trying to break into applications using legitimate channels, digital identity is a growing target. Learn what digital identity is and the attack methods fraudsters employ at every stage of the identity life cycle.