APT-INSIDER-PANELInitial Access

Insider Admin-Panel Coercion (Twitter 2020)

Bribe / coerce / phish an employee with access to an internal admin panel that can change account email / 2FA — mass account takeover.

§ Where this technique fits

APT-INSIDER-PANEL is catalogued under the Initial Access tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 2 on average.

§ Dossiers chaining this technique

Insider admin panel coercion → mass account takeover (Twitter 2020)
Identify employees with access to an internal admin panel. SE / coerce one to use the panel to change target accounts' email + 2FA, then take them over.
step 2 / 5

§ What commonly comes next

01
Modify Authentication Process
T1556 · Credential Access
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Insider admin panel coercion → mass account takeover (Twitter 2020)

§ What commonly comes next