Credential Theft

Credential Theft covers the technique of obtaining login credentials, passwords, session tokens, or MFA codes through phishing, vishing, infostealer malware, or similar means. It describes how access was gained, not an actor's classification, so pair it with the relevant actor or campaign tag. Distinct from Credential Stuffing, which covers reusing already-breached credentials against a new target.

Threat Intelligence

Qilin Ransomware Threat

Qilin affiliates run Linux encryptors on Windows through legitimate RMM tools, pair BYOVD attacks with Veeam credential theft, and have hit manufacturers like Nissan and Asahi Group Holdings for tens of millions in losses.

CoPhish