T1114Techniquecollectionagent-callable

T1114Email Collection

Platforms: Windows · Office 365 · Google Workspace · macOS · Linux

ATT&CK version: 14.1

What it is

Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.

ATT&CK tactics· 1

Collection

References

  1. https://attack.mitre.org/techniques/T1114
  2. https://blogs.technet.microsoft.com/timmcmic/2015/06/08/exchange-and-office-365-mail-forwarding-2/
Sourced from MITRE ATT&CK Enterprise v14.1. Curated and contextualized for EU compliance use cases by Adam Lundqvist, Founder at SQUR.