Clankerusecase
MITRE ATT&CK detection coverage
 ← Back to main site
Home/ MITRE Matrix/ Collection/ T1056.003

T1056.003Web Portal Capture

T1056.003 — Web Portal Capture is a MITRE ATT&CK technique in the Collection tactic. Clankerusecase tracks 4 detection use cases covering it and 4 threat-intel articles citing it.

CollectionCredential Access
View on the matrix → Filter Detection Library MITRE official spec ↗
4Use cases
4Articles
0Sub-techniques
2Tactics
↑ Parent technique: T1056 · Input Capture

Use cases covering this technique (4)

[LLM] Raviral.com Sniper Dz kit endpoints accessed (k_fac.php / track.js) Bespoke delivery · alerting DSΣPDDCS [LLM] Aikido npm phishing: user clicked phishing URL hosting /DIVzTaSF credential capture Bespoke delivery · alerting DSΣPDDCS [LLM] Connection to Beamglea phishing credential-harvesting domains Bespoke actions · alerting DSΣPDDCS [LLM] Browser/HTTPS traffic to npmjs.help credential-harvesting page Bespoke delivery · alerting DSΣPDDCS

Articles citing this technique (4)

high INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator art-33
high Gone Phishin': npm Packages Serving Custom Credential Harvesting Pages art-605
crit Phishing Campaign Leveraging the NPM Ecosystem art-754
high npm Supply Chain Attack via Open Source maintainer compromise art-794