ThreatPodium

T1078 · 2026-07-07 Valid Accounts Stealth Containers ESXi IaaS Identity Provider MITRE ATT&CK → Technique Valid Accounts (T1078) Tactic Stealth Platforms Containers, ESXi, IaaS, Identity Provider, Linux, macOS, Network Devices, Office Suite, SaaS, Windows Overview Valid Accounts (T1078) describes adversaries using legitimate, existing credentials — stolen, purchased, phished, or brute-forced — to access systems and … Read more

T1566.002 · 2026-07-06 Spearphishing Link Initial Access Identity Provider Linux macOS Office Suite MITRE ATT&CK → Technique Spearphishing Link (T1566.002) Tactic Initial Access Platforms Identity Provider, Linux, macOS, Office Suite, SaaS, Windows Overview Spearphishing Link (T1566.002) is a targeted email attack where adversaries send carefully crafted messages containing malicious URLs to specific individuals. When the … Read more

T1566.001 · 2026-07-05 Spearphishing Attachment Initial Access Linux macOS Windows MITRE ATT&CK → Technique Spearphishing Attachment (T1566.001) Tactic Initial Access Platforms Linux, macOS, Windows Overview Spearphishing Attachment (T1566.001) is a targeted email-based attack where an adversary sends a crafted email to a specific individual, company, or industry with a malicious file attached — commonly an … Read more

T1569.002 · 2026-07-04 Service Execution Execution Windows MITRE ATT&CK → Technique Service Execution (T1569.002) Tactic Execution Platforms Windows Overview Service Execution (T1569.002) describes how adversaries abuse the Windows Service Control Manager (SCM) to run malicious commands or payloads — either by creating a new service, modifying an existing one, or using tools like sc.exe, net.exe, … Read more