Tinker Secor USES persistence
Tinker lists persistence as a possible phase of his methodology and later says he obtained persistence on a finance computer.
Explicit Confidence 99% · Tinker Secor EP 36 Details
“I get persistence”
Technique
technique:persistence
Also: establishing persistence, persistent connection
Maintaining access to a compromised system.
Maintaining access to a compromised system.
“I get persistence.”
Maintaining a continuing connection to the compromised network in case the stolen password was changed.
“They gave themselves a persistent connection to it in case that password was to change.”
Maintaining access after an exploit terminates, illustrated through a scheduled crontab entry.
“something that will persist after their exploit terminates”
Maintaining access to a compromised network after the original entry method is fixed or removed.
“once they got in, they needed to establish persistence”
“This is where they can stay in the network, hidden, unseen”
Maintaining access in the Bangladesh Bank environment while preparing the theft.
“moving around, establishing persistence”
Maintaining a continuing foothold in a compromised network so attackers can regain access after a connection is dropped.
“they’re gonna want to create a persistent connection and elevate their privileges”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Tinker Secor | Explicit | 36 |
| incoming | INVOLVES | Las Vegas Sands cyber-attack | Explicit | 37 |
| incoming | INVOLVES | Bangladesh Bank heist | Explicit | 72 |
| incoming | INVOLVES | JPMorgan Chase breach | Explicit | 76 |
Tinker Secor USES persistence
Tinker lists persistence as a possible phase of his methodology and later says he obtained persistence on a finance computer.
Explicit Confidence 99% · Tinker Secor EP 36 Details
“I get persistence”
Las Vegas Sands cyber-attack INVOLVES persistence
The attackers established a persistent connection so they could retain access if the compromised password changed.
Explicit Confidence 99% · Jack Rhysider EP 37 Details
“They gave themselves a persistent connection to it in case that password was to change”
Bangladesh Bank heist INVOLVES persistence
The attackers established persistence while mapping the bank's network and learning how to transfer money.
Explicit Confidence 98% · Jack Rhysider EP 72 Details
“moving around, establishing persistence, and learning about how to transfer money around”
JPMorgan Chase breach INVOLVES persistence
The hackers created a back door to maintain persistent access to the JPMorgan Chase network.
Explicit Confidence 99% · Jack Rhysider EP 76 Details
“The hackers created a back door into the JPMorgan Chase network.”