Técnica MITRE ATT&CK · Acceso inicial

`T1566.002` Spearphishing Link

Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

Clop
Sandworm
Earth Lusca

Reglas Sigma para cazarla

Potential Malicious Usage of CloudTrail System Managerhightest · aws
Suspicious Execution via macOS Script Editormediumtest · macos
Suspicious Email Delivered In Microsoft 365mediumexperimental · m365

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.