Social Media
Subtechnique · ATTACK:enterprise:T1593.001
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:T1593.001",
"title": "Social Media",
"type": "Subtechnique",
"source_url": "https://attack.mitre.org/techniques/T1593/001",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--bbe5b322-e2af-4a5e-9625-a4e62bf84ed3",
"external_id": "T1593.001",
"domain": "enterprise",
"created": "2020-10-02T16:49:31.262Z",
"modified": "2025-10-24T17:49:18.054Z",
"version": "1.0",
"aliases": [
],
"tactics": [
"reconnaissance"
],
"source_references": [
{
"source_name": "Cyware Social Media",
"url": "https://cyware.com/news/how-hackers-exploit-social-media-to-break-into-your-company-88e8da8e"
}
]
}Explicit source assertions (6)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G0094 → uses → ATTACK:enterprise:T1593.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3d78512d-1a97-4132-8d8f-cd9ceaf03246
Malwarebytes Kimsuky June 2021ATTACK:enterprise:G1052 → uses → ATTACK:enterprise:T1593.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7d527d88-29d3-40d8-9347-48b0f788fcc3
Sekoia ClickFake 2025 · Validin Contagious Interview North Korea ClickFix January 2025 · SecurityScorecard Contagious Interview October 2024 · SecurityScorecard Contagious Interview FamousChollima October 2024 · PaloAlto ContagiousInterview BeaverTail InvisibleFerret November 2023 · PaloAlto Unit42 ContagiousInterview BeaverTail InvisibileFerret October 2024ATTACK:enterprise:G1011 → uses → ATTACK:enterprise:T1593.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c854c48c-f9b0-4e41-904d-df7fe6700e7f
Google EXOTIC LILY March 2022ATTACK:enterprise:T1593.001 → subtechnique-of → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ef1787e0-add4-4490-9777-33462acf9325
ATTACK:enterprise:C0022 → uses → ATTACK:enterprise:T1593.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f73d269a-9a0d-4485-9587-e0f0f2335c35
ESET Lazarus Jun 2020ATTACK:enterprise:M1056 → mitigates → ATTACK:enterprise:T1593.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fdde385f-3781-47fa-9cb7-ef7c5b903e63