T1598.002Reconnaissance
Spearphishing Attachment
Adversaries may send spearphishing messages with a malicious attachment to elicit sensitive information that can be used during targeting. Spearphishing for information is an attempt to trick targets into divulging information, frequently credentials or other actionable information. Spearphishing for information frequently involves social engineering techniques, such as posing as a source with a…
CVEs1
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.1
Reports0
Detections
1 Sigma rule tagged T1598.002Spearphishing AttachmentT1598.0021 general rule
- HTML File Opened From Download Folderlowexperimental
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Spearphishing Attachment
1 CVE, by priority. Each link shows its badge.- CVE-2021-33739Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.4T1598.002Spearphishing AttachmentT1068Exploitation for Privilege EscalationMITRE CTID mapping of the KEV entry · how it is exploited6.6%Top 6.2%67.6priority