T1111Multi-Factor Authentication Interception
T1111 — Multi-Factor Authentication Interception is a MITRE ATT&CK technique in the Credential Access tactic. Clankerusecase tracks 3 detection use cases covering it and 4 threat-intel articles citing it.
Credential Access
3Use cases
4Articles
0Sub-techniques
1Tactic
Use cases covering this technique (3)
[LLM] AiTM MFA-relay: successful Entra sign-in from AWS EC2 / hosting ASN [LLM] JWR real-time exfil & operator WebSocket channel (the_final_interface / addCvv / webSocket/QT) [LLM] AitM session hijack: PaaS phishing-page visit followed by successful Entra sign-in from a different IPArticles citing this technique (4)
high Curiouser and Curiouser art-52