MITRE ATT&CKsub-technique

T1583.006 Web Services

Published 2020-10-01 Modified 2026-09-18 Official page ↗
Domain
enterprise
Tactics
Resource Development
Platforms
PRE
Version
1.3
Created
2020-10-01

Description

Adversaries may register for web services that can be used during targeting. A variety of popular websites exist for adversaries to register for a web-based service that can be abused during later stages of the adversary lifecycle, such as during Command and Control (Web Service), Exfiltration Over Web Service, or Phishing. Using common services, such as those offered by Google, GitHub, or Twitter, makes it easier for adversaries to hide in expected noise. By utilizing a web service, adversaries can make it difficult to physically tie back operations to them.

Related

Subtechnique of · MITRE ATT&CK (1)

  • T1583 Acquire Infrastructure technique

Tactic · MITRE ATT&CK (1)

  • TA0042 Resource Development tactic

Referenced by MITRE ATT&CK · mitigates (1)

  • M1056 Pre-compromise mitigation

Referenced by MITRE ATT&CK · uses (34)

Show all 34 ›

References