T1021.005_vnc
Adversaries may use Valid Accounts to remotely control machines using Virtual Network Computing (VNC).
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Adversaries may use Valid Accounts to remotely control machines using Virtual Network Computing (VNC).
Adversaries may use Valid Accounts to interact with remote systems using Windows Remote Management (WinRM).
Adversaries may log into accessible cloud services within a compromised environment using Valid Accounts that are synchronized with or federated to on-premises user identities.
Adversaries may use Valid Accounts to log into a service that accepts remote connections, such as telnet, SSH, and VNC.
Adversaries may search connected removable media on computers they have compromised to find files of interest.
Adversaries may use binary padding to add junk data and change the on-disk representation of malware.
Adversaries may perform software packing or virtual machine software protection to conceal their code.
Adversaries may use steganography techniques in order to prevent the detection of hidden information.
Adversaries may attempt to make payloads difficult to discover and analyze by delivering files to victims as uncompiled code.
Adversaries may smuggle data and files past content filters by hiding malicious payloads inside of seemingly benign HTML files.