MITRE ATT&CK technique · Resource Development

`T1585.002` Email Accounts

Sub-technique of T1585 Establish Accounts

Adversaries may create email accounts that can be used during targeting. Adversaries can use accounts created with email providers to further their operations, such as leveraging them to conduct [Phishing for Information](https://attack.mitre.org/techniques/T1598) or [Phishing](https://attack.mitre.org/techniques/T1566).(Citation: Mandiant APT1) Establishing email accounts may also allow…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

ShinyHunters
Callisto
Sandworm

Sigma rules to hunt it

SigmaHQ has no rules for this technique.

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.