Cyber threats

ATT&CK Techniques against Laos

Techniques used by the threat actors that target Laos, by tactic · MITRE ATT&CK profiles · darker = more actors
1
Actors with a profile
13
Techniques
T1016
Most used · 1 actors
Reset
Reconnaissance0
—
Resource Development0
—
Initial Access2
T1078 Valid Accounts1 T1566 Phishing1
Execution4
T1047 Windows Management Instrumentation1 T1053 Scheduled Task/Job1 T1204 User Execution1 T1574 Hijack Execution Flow1
Persistence4
T1053 Scheduled Task/Job1 T1078 Valid Accounts1 T1137 Office Application Startup1 T1547 Boot or Logon Autostart Execution1
Privilege Escalation3
T1053 Scheduled Task/Job1 T1078 Valid Accounts1 T1547 Boot or Logon Autostart Execution1
Stealth3
T1036 Masquerading1 T1078 Valid Accounts1 T1574 Hijack Execution Flow1
Defense Impairment0
—
Credential Access0
—
Discovery4
T1016 System Network Configuration Discovery1 T1018 Remote System Discovery1 T1046 Network Service Discovery1 T1518 Software Discovery1
Lateral Movement0
—
Collection0
—
Command and Control0
—
Exfiltration0
—
Impact0
—
Techniques to detect first
TechniqueTacticsActorsUsed by, for example
T1016 System Network Configuration Discovery discovery 1 Naikon
T1018 Remote System Discovery discovery 1 Naikon
T1036 Masquerading stealth 1 Naikon
T1046 Network Service Discovery discovery 1 Naikon
T1047 Windows Management Instrumentation execution 1 Naikon
T1053 Scheduled Task/Job execution, persistence, privilege-escalation 1 Naikon
T1078 Valid Accounts stealth, persistence, privilege-escalation, initial-access 1 Naikon
T1137 Office Application Startup persistence 1 Naikon
T1204 User Execution execution 1 Naikon
T1518 Software Discovery discovery 1 Naikon
T1547 Boot or Logon Autostart Execution persistence, privilege-escalation 1 Naikon
T1566 Phishing initial-access 1 Naikon

Each actor counts once per technique; sub-techniques are counted under their parent. Only actors with a MITRE ATT&CK profile are included (1), so the map shows documented tradecraft, not everything that happens.