Home/ MITRE Matrix/ Resource Development/ T1583.006

T1583.006Web Services

T1583.006 — Web Services is a MITRE ATT&CK technique in the Resource Development tactic. Clankerusecase tracks 5 detection use cases covering it and 2 threat-intel articles citing it.

Resource Development

View on the matrix → Filter Detection Library MITRE official spec ↗

5Use cases

2Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1583 · Acquire Infrastructure

Use cases covering this technique (5)

Cisco Secure Firewall - Rare Snort Rule Triggered ESCU actions · hunting P [LLM] First-seen browser egress to abused cloud-PaaS phishing domains (workers.dev / pages.dev / vercel.app / github.io / netlify.app / dweb.link) Bespoke delivery · hunting DSPDDCS [LLM] Safe Links click resolving through a cloud-PaaS redirect chain into AitM phishing Bespoke delivery · hunting DS [LLM] BeardShell C2: outbound to Icedrive cloud-storage API as non-browser process Bespoke c2 · alerting DSΣPDDCS [LLM] Covenant C2: outbound to Filen cloud-storage API as non-browser process Bespoke c2 · alerting DSΣPDDCS

Articles citing this technique (2)

crit How legitimate cloud platforms enable phishers to bypass MFA art-133

crit Sednit reloaded: Back in the trenches art-629