Knowledge Base · MITRE ATT&CK Alignment

Threat Intelligence & Taxonomies

Correlated threat actor Tactics, Techniques, and Procedures (TTPs) mapped to real-world social engineering attack vectors.

Social Engineering & Phishing TTPs (MITRE ATT&CK)

Industry Standard Framework
T1566.001Initial Access

Phishing: Spearphishing Link

Adversaries send spearphishing messages with a malicious link designed to lure the target to a credential-harvesting web portal.

Key Signatures:
Shortened URLs (bit.ly)Typosquatted TLDs (.top, .xyz)Homograph domain spoofing
Defensive Strategy:

Automated URL defanging, strict SPF/DKIM validation, out-of-band confirmation.

T1566.002Initial Access

Phishing: Spearphishing Attachment

Attackers send messages containing malicious files disguised as invoices, receipts, or administrative spreadsheets.

Key Signatures:
Macro-enabled documents (.docm)Encrypted zip files with password in bodyDouble extension files
Defensive Strategy:

Zero-trust attachment sandboxing, binary inspection, disallowing macros.

T1598Reconnaissance

Phishing for Information

Targeted communications seeking internal network topologies, org charts, or verification codes without direct payload delivery.

Key Signatures:
Posing as IT Helpdesk / Executive assistantRequests for OTPs or SMS confirmation tokens
Defensive Strategy:

Strict zero-disclosure policies, mandatory multi-person verification for credentials.

T1534Lateral Movement

Internal Spearphishing (BEC)

Adversaries leverage compromised internal accounts or convincing executive impersonation to request urgent wire transfers or gift cards.

Key Signatures:
Executive in urgent meeting claiming unavailable for phone callsDemands for secrecy
Defensive Strategy:

Out-of-band telephone verification, dual authorization on financial transactions.

Threat Feed Ingestion Roadmap: Direct API connectors for AbuseIPDB, URLHaus, and OpenCTI STIX feeds are slated for integration in Phase 2. All current threat indicator evaluations are performed live through our Qwen model and heuristic rules.