Merged by type-aware id across episodes. Same name + different type stay distinct (for example Sandworm the group vs Sandworm the book).
| Name | Type | Aliases | Episodes | Relationships |
|---|---|---|---|---|
|
Account takeover
technique:account_takeover
|
Technique | account compromise, account takeover, account takeovers, email compromise, hacking into accounts | 5 | 3 |
|
credential reuse
technique:credential_reuse
|
Technique | credential stuffing, password reuse | 5 | 5 |
|
Credential stuffing
technique:credential_stuffing
|
Technique | combo list attacks, commons, cracking accounts | 5 | 5 |
|
cross-site scripting
technique:cross_site_scripting
|
Technique | CSS-tag JavaScript execution, XSS | 5 | 6 |
|
incident response
technique:incident_response
|
Technique | IR, incident handling, incident response team | 5 | 3 |
|
password reuse
technique:password_reuse
|
Technique | credential reuse, password recycling, password reuse | 5 | 6 |
|
Reconnaissance
technique:reconnaissance
|
Technique | active reconnaissance, passive reconnaissance, recon, surveillance | 5 | 5 |
|
responsible disclosure
technique:responsible_disclosure
|
Technique | coordinated vulnerability disclosure, responsible disclosures, responsible vulnerability disclosure | 5 | 5 |
|
sinkholing
technique:sinkholing
|
Technique | sink holes, sink-hole, sinkhole, sinkholed, sinkholing Rustock | 5 | 4 |
|
Swatting
technique:swatting
|
Technique | swat, swatting attack | 5 | 5 |
|
Backdoor
technique:backdoor
|
Technique | back doors, backdoor access, backdoor into Bangladesh Bank, backdoors | 4 | 4 |
|
Brute-force attack
technique:brute_force_attack
|
Technique | brute force, brute force login, password brute force | 4 | 4 |
|
carding
technique:carding
|
Technique | carder activity, credit card fraud, identity theft, swiping | 4 | 4 |
|
credential dumping
technique:credential_dumping
|
Technique | database dump, password harvesting, password list | 4 | 4 |
|
digital forensics
technique:digital_forensics
|
Technique | forensics | 4 | 3 |
|
Google dorking
technique:google_dorking
|
Technique | Google dorks, Google hacking | 4 | 5 |
|
Honeypot
technique:honeypot
|
Technique | honey trap, honeypot, honeypot system | 4 | 4 |
|
lock picking
technique:lock_picking
|
Technique | lock picking, lock picks, lockpicking, picking the lock | 4 | 4 |
|
man-in-the-middle attack
technique:man_in_the_middle_attack
|
Technique | MITM, MITM attack, man-in-the-middle, man-in-the-middle tools | 4 | 4 |
|
Money mule
technique:money_mule
|
Technique | money mule scam, money mules, money muling | 4 | 3 |
|
multi-factor authentication
technique:multi_factor_authentication
|
Technique | MFA, dual-factor authentication, two-factor authentication | 4 | 1 |
|
network scanning
technique:network_scanning
|
Technique | IP-range scanning, NetBIOS scanning, network discovery, reconnaissance, scan and navigate across the network | 4 | 4 |
|
Operational security
technique:operational_security
|
Technique | OPSEC, OpSec, operation security, opsec | 4 | 1 |
|
Password cracking
technique:password_cracking
|
Technique | hash cracking, password compromise | 4 | 1 |
|
phreaking
technique:phreaking
|
Technique | phone hacking | 4 | 3 |