MITRE ATT&CK technique · Resource Development

`T1586.003` Cloud Accounts

Sub-technique of T1586 Compromise Accounts

Adversaries may compromise cloud accounts that can be used during targeting. Adversaries can use compromised cloud accounts to further their operations, including leveraging cloud storage services such as Dropbox, Microsoft OneDrive, or AWS S3 buckets for [Exfiltration to Cloud Storage](https://attack.mitre.org/techniques/T1567/002) or to [Upload…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

APT29

Sigma rules to hunt it

Okta Suspicious Activity Reported by End-userhightest · okta

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.