Source: MITRE_ATTCK
Threat actor: APT28
Affected sector: Unknown
Attack vector: Unknown Tactic
Severity: High
Confidence: High
MITRE ATT&CK techniques: T1134.001
Description:
MITRE ATT&CK technique T1134.001 (Token Impersonation/Theft) used by APT28. Adversaries may duplicate then impersonate another user's existing token to escalate privileges and bypass access controls. For example, an adversary can duplicate an existing token using `DuplicateTo...