Skip to content

Commit e456870

Browse files
committed
2025-updates-tb
additional teq and tac updates and creations
1 parent 3d2208a commit e456870

9 files changed

Lines changed: 46 additions & 4 deletions

‎_tactics/02-credential-acquisition.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Credential Acquisition
33
parent: /phases/01-resource-development
44
ref-id: TAC-02
5-
short-desc: The adversary is trying to steal account names, passwords and authentication tokens. Using legitimate credentials can give adversaries access to systems, make them harder to detect, and provide the opportunity to create more accounts to help achieve their goals. Methods used to get credentials include phishing, keylogging and extracting from dumped credentials.
5+
short-desc: Adversaries may purchase or otherwise obtain accounts. Using legitimate credentials can give adversaries access to systems, make them harder to detect, and provide the opportunity to create more accounts to help achieve their goals. Methods used to get credentials include phishing, keylogging and extracting from dumped credentials.
66
layout: tactic
77
---
88

‎_tactics/03-infrastructure-acquisition.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,6 @@
22
title: Infrastructure Acquisition
33
parent: /phases/01-resource-development
44
ref-id: TAC-03
5-
short-desc: Before compromising a victim, adversaries may buy, lease, or rent infrastructure that can be used during targeting. A wide variety of infrastructure exists for hosting and orchestrating operations. Infrastructure solutions include physical or cloud servers, proxies, domains, and third-party web services. Additionally, botnets are available for theft, rent or purchase (other adversaries may build their own botnets).
5+
short-desc: Adversaries may buy, lease, or rent infrastructure that can be used during targeting. A wide variety of infrastructure exists for hosting and orchestrating operations. Infrastructure solutions include physical or cloud servers, proxies, domains, and third-party web services. Additionally, botnets are available for theft, rent or purchase (other adversaries may build their own botnets).
66
layout: tactic
77
---

‎_tactics/30-bonus-farming.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
title: Bonus Farming
3+
parent: /phases/06-post-attack
4+
ref-id: TAC-30
5+
short-desc: Bonus farming is the process of gathering additional bonuses from sites or using referral links to gain more monetory or discount gain from a site
6+
layout: tactic
7+
---

‎_tactics/31-AI-model-training.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
title: AI Model Training
3+
parent: /phases/06-post-attack
4+
ref-id: TAC-31
5+
short-desc: The data gathered in the attack is incorporated into datasets used for training AI models.
6+
layout: tactic
7+
---
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
title: Identity Acquisition
3+
parent: /phases/01-resource-development
4+
ref-id: TAC-38
5+
short-desc: The adversary obtains a digital identity to use in subsequent attacks.
6+
layout: tactic
7+
---

‎_tactics/43-information-release.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
title: Information Release
3+
parent: /phases/06-post-attack
4+
ref-id: TAC-43
5+
short-desc: The adversary publicly releases private information gathered during the attack.
6+
layout: tactic
7+
---

‎_techniques/055-automated-sale.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Automated Sale
3-
parent: [/tactics/16-spinning, /tactics/17-sniping, /tactics/24-sale]
3+
parent: /tactics/24-sale
44
ref-id: TEQ-055
55
short-desc: The adversary uses automation to advertise stock of a particular item on a third party website either before, at the time of, or after purchasing the desired item from the target site. In some cases, the purchase will be completed only after a confirmed Sale of the item at an acceptable level of profit for the adversary.
66
layout: technique
7-
---
7+
---

‎_techniques/112-deepfakes.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
title: Deepfakes
3+
parent: /tactics/09-human-emulation
4+
ref-id: TEQ-112
5+
short-desc: The adversary uses synthetic video, images or audio to represent a human and bypass biometric challenges.
6+
layout: technique
7+
---
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
title: Intellectual Property Leak
3+
parent: /tactics/43-information-release
4+
ref-id: TEQ-115
5+
short-desc: The adversary leaks intellectual property into the public sphere by making it freely available.
6+
layout: technique
7+
---

0 commit comments

Comments
 (0)