Skip to content

Commit 64af0af

Browse files
committed
Add missing technique to loyalty points killchain
1 parent f3d9c36 commit 64af0af

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

‎_kill-chains/loyalty-points-bot.md‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
---
22
title: Loyalty Points Bot
33
layout: kill-chain
4-
phases: [Resource Development, Reconnaissance, Defence Bypass, Attack Execution, Post-Attack]
5-
tactics: [Credential Acquisition, Payment Detail Acquisition, Infrastructure Acquisition, Tool Development, Attack Surface Identification, Device Emulation, Proxying, CAPTCHA Bypass, Session Manipulation, Impersonation, Smokescreening, Payment Detail Abuse, Purchase, Information Release, Sale]
6-
techniques: [Data Dumps, Person in the Middle, Social Engineering, Valid Accounts, Botnet, Endpoint Enumeration, Proxies, Trusted Infrastructure, Development of Tools, Testing of Tools, Campaign Reuse, User Agent Spoofing, Device Configuration Emulation, TLS Spoofing, Header Spoofing, IP Rotation, CAPTCHA Farm, Automated CAPTCHA Bypass, MFA Bypass, Token Bypass, Cookie Abuse, Credential Pinning, Volumetric Traffic Disguise, Target Diversification, Loyalty Points Abuse, Automated Purchase, Payment Detail Dumping, Information Brokerage, Automated Sale, Manual Sale]
4+
phases: [Resource Development, Reconnaissance, Defence Bypass, Attack Execution, Actions on the Objective, Post-Attack]
5+
tactics: [Credential Acquisition, Payment Detail Acquisition, Infrastructure Acquisition, Tool Development, Attack Surface Identification, Device Emulation, Proxying, CAPTCHA Bypass, Session Manipulation, Impersonation, Smokescreening, Payment Detail Abuse, Cashout, Purchase, Information Release, Sale]
6+
techniques: [Data Dumps, Person in the Middle, Social Engineering, Valid Accounts, Botnet, Endpoint Enumeration, Proxies, Trusted Infrastructure, Development of Tools, Testing of Tools, Campaign Reuse, User Agent Spoofing, Device Configuration Emulation, TLS Spoofing, Header Spoofing, IP Rotation, CAPTCHA Farm, Automated CAPTCHA Bypass, MFA Bypass, Token Bypass, Cookie Abuse, Credential Pinning, Volumetric Traffic Disguise, Target Diversification, Loyalty Points Abuse, Automated Purchase, Loyalty Points Redemption, Payment Detail Dumping, Information Brokerage, Automated Sale, Manual Sale]
77
short-desc: A loyalty points bot is used by adversaries to steal loyalty points from user accounts. These are used to purchase goods and services either on the issuing site or downstream on third party sites that accept the loyalty points.
88
---

0 commit comments

Comments
 (0)