Technique
technique:credential_capture
Also: capturing credentials
Obtaining an administrator’s credentials from activity on a compromised server or authenticated session.
Obtaining an administrator’s credentials from activity on a compromised server or authenticated session.
“I’m probably going to be able to capture his credentials”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Nation State Actor | Explicit | 10 |
Nation State Actor USES Credential capture
The operator plans to capture an administrator's credentials when the administrator logs into the compromised server.
Explicit Confidence 99% · Nsa EP 10 Details
“I’m probably going to be able to capture his credentials”