T1078 — Valid Accounts

MITRE ATT&CK technique observed against the OffSeq honeypot fleet

Last 30 days · #20 most-observed technique · last seen 17 hours ago

The #20 most-observed ATT&CK technique across captured attacks.

Abuse of valid accounts — logging in with legitimate or default credentials. OffSeq honeypots observed this technique in 1,024 attacks from 372 distinct source IPs over the last 30 days.

T1078 on attack.mitre.org →