T1598Reconnaissance
Phishing for Information
Adversaries may send phishing messages to elicit sensitive information that can be used during targeting. Phishing for information is an attempt to trick targets into divulging information, frequently credentials or other actionable information. Phishing for information is different from Phishing in that the objective is gathering data from the victim rather than executing malicious code. All…
CVEs0
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
CVEs linked to Phishing for Information
0 CVEs, by priority. Each link shows its badge.No CVEs are linked to this technique yet.
Linked through a sub-technique
1 more- CVE-2021-33739Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityMicrosoft · WindowsKEVPublic exploitHigh · 8.4T1598.002Spearphishing AttachmentT1068Exploitation for Privilege Escalation6.6%Top 6.2%67.6priority