Technique
technique:account_takeover
Also: account compromise, account takeover, account takeovers, email compromise, hacking into accounts
Taking control of a customer account by changing its recovery or administrative contact details.
Unauthorized control of online accounts after compromising a phone number and email account.
“They got into Twitter, they got into Instagram, they got into Gmail.”
“if someone can hack into a phone or an account and take it over”
Obtaining control of another person’s social-media account by changing passwords, abusing phone recovery, or coercing the owner.
“hacking into accounts and changing passwords, SIM-swapping people to try to gain access to an account”
Unauthorized acquisition of email, gaming, social-media, exchange, and cryptocurrency accounts through password resets, credential reuse, vulnerabilities, and SIM-swapping.
“you can completely take over their AOL account”
“he was mastering the dark art of e-mail compromise”
Taking control of a customer account by changing its recovery or administrative contact details.
“when I’m trying to do an account takeover”
Unauthorized use of compromised streaming accounts to generate apparently normal streams and conceal fraudulent activity.
“Account takeovers. That’s a huge percentage of what we see now.”
“they’ll log in as you, play a song five or six times, and then leave”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Shane Sonderman | Explicit | 106 |
| incoming | USES | Joseph Harris | Explicit | 118 |
| incoming | USES | Rachel Tobac | Explicit | 144 |
Shane Sonderman USES Account takeover
The broader scheme included attempts to gain control of social-media accounts through password attacks and SIM-swapping.
Explicit Confidence 91% · Jack Rhysider EP 106 Details
“hacking into accounts and changing passwords, SIM-swapping people to try to gain access to an account”
Joseph Harris USES Account takeover
Joseph took over victims’ email and gaming accounts in order to sell them.
Explicit Confidence 98% · Joseph Harris EP 118 Details
“take the accounts and then sell them for money”
Rachel Tobac USES Account takeover
During an authorized bank penetration test, Rachel attempted to take over customer accounts and obtain administrative access.
Explicit Confidence 99% · Rachel Tobac EP 144 Details
“my job was to take over multiple accounts and steal access”
“I have full admin access to the bank account”