Anatomy of an Attack
Breach-focused attacks will target any employee to gain access to their system. It can come in the form of a lure to a credential phishing website or an urgent ask to review a document with a malicious payload.
Phase 1
ReconnaissanceIdentify Security Gaps
The adversary conducts research against target companies to identify potential victims, vulnerabilities, and security gaps at the perimeter.
Phase 2
AttackLaunch Campaign
The adversary launches an email attack impersonating trust individuals, luring the victim to a credential-phishing website or asking them to review a fake document.
Phase 3
ControlEstablish Persistence
The adversary uses the compromised user credentials or their own command & control network to gain access to the victim’s system and hide their trail.
Phase 4
EvolveAdjust Tactics
The adversary conducts internal reconnaissance to identify critical systems, escalate privileges, and discover internal business processes that they can exploit.
Phase 5
ExfiltrateSteal Information
Taking advantage of gathered intelligence, the adversary moves laterally secretly gaining access to critical systems and exfiltrating data without being detected.
