MITRE ATLAStechnique
AML.T0012 Valid Accounts
- Tactics
- Initial Access, Privilege Escalation
- Created
- 2022-01-24
Description
Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access.
Credentials may take the form of usernames and passwords of individual user accounts or API keys that provide access to various AI resources and services.
Compromised credentials may provide access to additional AI artifacts and allow the adversary to perform Discover AI Artifacts.
Compromised credentials may also grant an adversary increased privileges such as write access to AI artifacts used during development or production.
Related
Tactic · MITRE ATLAS (2)
- AML.TA0012 Privilege Escalation tactic
- AML.TA0004 Initial Access tactic
Att&ck equivalent · MITRE ATT&CK (1)
- T1078 Valid Accounts technique