Technique
technique:credential_phishing
Phishing intended to capture login credentials through counterfeit account-login pages.
Phishing intended to capture login credentials through counterfeit account-login pages.
“credential phishing websites”
“the phishing site you land on knows who is coming”
Phishing intended to harvest email credentials and passwords.
“At most they will do credential phishing where they’ll try and harvest the e-mail credentials”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Dark Basin | Explicit | 79 |
| incoming | USES | Business E-mail Compromise | Explicit | 141 |
Dark Basin USES Credential phishing
The phishing sites used by Dark Basin requested victims’ login credentials, including email passwords.
Explicit Confidence 99% · Adam Hulcoop EP 79 Details
“the phishing site you land on knows who is coming and they can pre-load that text and pre-load that screen to make it look like – you’ve already been signed into your Gmail; just re-enter your password for us.”
Business E-mail Compromise USES Credential phishing
Ronnie says that, in some BEC cases, attackers harvest e-mail credentials and passwords through credential phishing.
Explicit Confidence 97% · Ronnie Tokazowski EP 141 Details
“At most they will do credential phishing where they’ll try and harvest the e-mail credentials and e-mail passwords”