Search Victim-Owned Websites
Description
Adversaries may search websites owned by the victim for information that can be used during targeting.
Victim-owned websites may contain technical details about their AI-enabled products or services.
Victim-owned websites may contain a variety of details, including names of departments/divisions, physical locations, and data about key employees such as names, roles, and contact info.
These sites may also have details highlighting business operations and relationships.
Adversaries may search victim-owned websites to gather actionable information.
This information may help adversaries tailor their attacks (e.g. Adversarial AI Attacks or Manual Modification).
Information from these sources may reveal opportunities for other forms of reconnaissance (e.g. Search Open Technical Databases or Search Open AI Vulnerability Analysis)
- ATLAS ID
- AML.T0003
- Maturity
- DemonstratedShown to work in research or red-team exercises.
- Platforms
- Enterprise
Mitigations
- AML.M0000Limit Public Release of Information
Restrict release of technical information on ML-enabled products and organizational information on the teams supporting ML-enabled products.
Case studies that use it
Related ATT&CK technique
ATLAS adapts this technique from MITRE ATT&CK Enterprise.