CAPEC-555Remote Services with Stolen Credentials

This pattern of attack involves an adversary that uses stolen credentials to leverage remote services such as RDP, telnet, SSH, and VNC to log into a system. Once access is gained, any number of malicious activities could be performed. Metadata: standard CAPEC pattern, status stable, severity very high. Underlying weaknesses: CWE-522, CWE-308, CWE-309, CWE-294, CWE-263 (and 2 more). Mapped ATT&CK techniques: [object Object], [object Object], [object Object]. Related CAPEC patterns: [object Object], [object Object].