Skip to content
CYBER DEFENSE MONITOR
Cyronix Intelligence Core
Dashboard
Intelligence
Live Map
News
Threat Actors
Tools
Blog
Contact
--:--:-- UTC
ELEVATED
Secure Perimeter
Dashboard
/
Intelligence
/
ATT&CK
/
T1078
Valid Accounts
MITRE ATT&CK
T1078
Summary
Logging in with legitimate stolen credentials, blending in with normal activity.
Tactics
TA0001
Initial Access
TA0003
Persistence
TA0004
Privilege Escalation
TA0005
Defense Evasion
Tracked actors using this technique (3)
OilRig
Iran (state-aligned)
Espionage
APT33
Iran (state-aligned)
Espionage
Agonizing Serpens
Iran (state-aligned)
Sabotage
Reference
View on MITRE ATT&CK
Generate detection rule →
← Full ATT&CK matrix
Threat actor encyclopedia