Applied Cybernetics Group
T1078.003 — Local Accounts
- Technique
T1078.003- Tactics
- Stealth, Persistence, Privilege Escalation, Initial Access
- MISP citations
- 0
- KEV CVEs mapped
- 1
- Community rules
- 5
- thrunt rules
- 0
- Upstream
- https://attack.mitre.org/techniques/T1078/003
MITRE description
Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Local accounts are those configured by an organization for use by users, remote support, services, or for administration on a single system or service. Local Accounts may also be abused to elevate privileges and harvest credentials through [OS Credential Dumping](https://attack.mitre.org/techniques/T1003). Password reuse may allow the abuse of local accounts across a set of machines on a network for the purposes of Privilege Escalation and Lateral Movement.
KEV CVEs mapped to this technique
Per MITRE CTID's hand-curated KEV→ATT&CK mappings — these are the actively-exploited vulnerabilities behind this technique's KEV signal.