T1552 — Unsecured Credentials

MITRE ATT&CK technique observed against the OffSeq honeypot fleet

Last 30 days · #8 most-observed technique · last seen 28 minutes ago

The #8 most-observed ATT&CK technique across captured attacks.

Harvesting unsecured credentials left on the host or in config. OffSeq honeypots observed this technique in 74,690 attacks from 2,052 distinct source IPs over the last 30 days.

T1552 on attack.mitre.org →