Data Breaches

2.

The Anatomy of a Data Breach

2.1.

Cyber Kill Chain Model

2.1.1.

2.1.1.1.

Target Identification

2.1.1.1.1.

Selecting Organizations

2.1.1.1.2.

Selecting Individuals

2.1.1.1.3.

Profiling Targets

2.1.1.2.

Information Gathering

2.1.1.2.1.

Open Source Intelligence (OSINT)

2.1.1.2.2.

Social Media Reconnaissance

2.1.1.2.3.

Network Scanning

2.1.1.2.4.

Domain and DNS Analysis

2.1.2.

2.1.2.1.

Creating Malicious Payloads

2.1.2.1.1.

Malware Creation

2.1.2.1.2.

Custom Exploits

2.1.2.1.3.

Packing and Obfuscation

2.1.2.2.

Payload Delivery Mechanisms

2.1.3.

2.1.3.1.

Email-Based Delivery

2.1.3.1.1.

Phishing Emails

2.1.3.1.2.

2.1.3.1.3.

Business Email Compromise

2.1.3.2.

Web-Based Delivery

2.1.3.2.1.

Drive-by Downloads

2.1.3.2.2.

Watering Hole Attacks

2.1.3.2.3.

Compromised Websites

2.1.3.3.

Physical Delivery

2.1.3.3.1.

Infected USB Drives

2.1.3.3.2.

Malicious CDs and DVDs

2.1.3.4.

Supply Chain Delivery

2.1.4.

2.1.4.1.

Triggering Vulnerabilities

2.1.4.1.1.

Software Vulnerabilities

2.1.4.1.2.

Configuration Weaknesses

2.1.4.1.3.

Human Vulnerabilities

2.1.4.2.

Initial Compromise

2.1.5.

2.1.5.1.

Malware Implantation

2.1.5.1.1.

2.1.5.1.2.

Remote Access Tools

2.1.5.1.3.

2.1.5.2.

Establishing Persistence

2.1.5.2.1.

Registry Modifications

2.1.5.2.2.

Scheduled Tasks

2.1.5.2.3.

Service Installation

2.1.6.

Command and Control

2.1.6.1.

Establishing Communication Channels

2.1.6.1.1.

2.1.6.1.2.

Domain Generation Algorithms

2.1.6.1.3.

Encrypted Communications

2.1.6.2.

Evasion Techniques

2.1.6.2.1.

Traffic Obfuscation

2.1.6.2.2.

Domain Fronting

2.1.6.3.

Remote Manipulation

2.1.6.3.1.

Issuing Commands

2.1.6.3.2.

2.1.7.

Actions on Objectives

2.1.7.1.

Internal Reconnaissance

2.1.7.1.1.

Network Mapping

2.1.7.1.2.

System Enumeration

2.1.7.1.3.

2.1.7.2.

Lateral Movement

2.1.7.2.1.

Credential Harvesting

2.1.7.2.2.

Pass-the-Hash Attacks

2.1.7.2.3.

Exploiting Trust Relationships

2.1.7.3.

Privilege Escalation

2.1.7.3.1.

Exploiting System Flaws

2.1.7.3.2.

Bypassing Access Controls

2.1.7.3.3.

Token Manipulation

2.1.7.4.

Data Collection

2.1.7.4.1.

Sensitive Data Identification

2.1.7.4.2.

2.1.7.5.

Data Exfiltration

2.1.7.5.1.

Data Compression and Encryption

2.1.7.5.2.

Exfiltration Channels

2.1.7.5.3.

Timing and Volume Control

Previous

1. Fundamentals of Data Breaches

Go to top

Next

3. Causes and Sources of Data Breaches