Merge pull request #32 from tommy2gone/v2025-update

TB-2025-update

Author: cyber-cyril

_tactics/02-credential-acquisition.md

@@ -2,7 +2,7 @@
 title: Credential Acquisition
 parent: /phases/01-resource-development
 ref-id: TAC-02
-short-desc: The adversary is trying to steal account names, passwords and authentication tokens. Using legitimate credentials can give adversaries access to systems, make them harder to detect, and provide the opportunity to create more accounts to help achieve their goals. Methods used to get credentials include phishing, keylogging and extracting from dumped credentials.
+short-desc: Adversaries may purchase or otherwise obtain accounts. Using legitimate credentials can give adversaries access to systems, make them harder to detect, and provide the opportunity to create more accounts to help achieve their goals. Methods used to get credentials include phishing, keylogging and extracting from dumped credentials.
 layout: tactic
 ---
 

_tactics/03-infrastructure-acquisition.md

@@ -2,6 +2,6 @@
 title: Infrastructure Acquisition
 parent: /phases/01-resource-development
 ref-id: TAC-03
-short-desc: Before compromising a victim, adversaries may buy, lease, or rent infrastructure that can be used during targeting. A wide variety of infrastructure exists for hosting and orchestrating operations. Infrastructure solutions include physical or cloud servers, proxies, domains, and third-party web services. Additionally, botnets are available for theft, rent or purchase (other adversaries may build their own botnets).
+short-desc: Adversaries may buy, lease, or rent infrastructure that can be used during targeting. A wide variety of infrastructure exists for hosting and orchestrating operations. Infrastructure solutions include physical or cloud servers, proxies, domains, and third-party web services. Additionally, botnets are available for theft, rent or purchase (other adversaries may build their own botnets).
 layout: tactic
 ---

_tactics/30-bonus-farming.md

@@ -0,0 +1,7 @@
+---
+title: Bonus Farming
+parent: /phases/06-post-attack
+ref-id: TAC-30
+short-desc: Bonus farming is the process of gathering additional bonuses from sites or using referral links to gain more monetory or discount gain from a site
+layout: tactic
+---

_tactics/31-AI-model-training.md

@@ -0,0 +1,7 @@
+---
+title: AI Model Training
+parent: /phases/06-post-attack
+ref-id: TAC-31
+short-desc: The data gathered in the attack is incorporated into datasets used for training AI models.
+layout: tactic
+---

_tactics/38-identity-acquisition.md

@@ -0,0 +1,7 @@
+---
+title: Identity Acquisition
+parent: /phases/01-resource-development
+ref-id: TAC-38
+short-desc: The adversary obtains a digital identity to use in subsequent attacks.
+layout: tactic
+---

_tactics/43-information-release.md

@@ -0,0 +1,7 @@
+---
+title: Information Release
+parent: /phases/06-post-attack
+ref-id: TAC-43
+short-desc: The adversary publicly releases private information gathered during the attack.
+layout: tactic
+---

_techniques/015-continual-content-scraping.md

@@ -1,6 +1,6 @@
 ---
 title: Continual Content Scraping
-parent: [/tactics/36-specific-target-scraping, /tactics/37-loose-target-scraping]
+parent: [/tactics/06-specific-target, /tactics/07-loose-target]
 ref-id: TEQ-015
 short-desc: Scraping the same webapp or API continuously without breaks in the run time. This is usually performed to check for the exact moment when something becomes available (such as a new limited-run product the attacker wishes to be amongst the first to acquire).
 layout: technique

_techniques/016-periodic-content-scraping.md

@@ -1,6 +1,6 @@
 ---
 title: Periodic Content Scraping
-parent: [/tactics/36-specific-target-scraping, /tactics/37-loose-target-scraping]
+parent: [/tactics/06-specific-target, /tactics/07-loose-target]
 ref-id: TEQ-016
 short-desc: Scraping a webapp or API in periodic bursts with breaks between each run. This is generally performed to acquire information without generating a pattern of continuous activity that is likely to be blocked by vigilant defenders or risk putting undue strain on the webapp or API.
 layout: technique

_techniques/017-technical-reconnaissance.md

@@ -0,0 +1,7 @@
+---
+title: Technical Reconnaissance
+parent: [/tactics/06-specific-target, /tactics/07-loose-target]
+ref-id: TEQ-017
+short-desc: An adversary seeks technical information related to the target (such as  sub-domains, IP addresses and types of software a target is utilising) to better inform later stages of the attack.
+layout: technique
+---

_techniques/043-comment-flooding.md

@@ -0,0 +1,7 @@
+---
+title: Comment Flooding
+parent: /tactics/14-fake-interaction
+ref-id: TEQ-043
+short-desc: Comment Flooding is when an adversary repeatedly posts the same or similar comments over and over. This may be employed to prevent the comments page from being used in its intended fashion by overwhelming legitimate users with large numbers of comments, or to hide comments of a particular type by pushing them down the page or onto subsequent pages.
+layout: technique
+---