Establish Accounts
Description
Adversaries may create accounts with various services for use in targeting, to gain access to resources needed in AI Attack Staging, or for victim impersonation.
- ATLAS ID
- AML.T0021
- Maturity
- RealizedUsed by real adversaries against AI systems in the wild.
- Platforms
- Enterprise
Mitigations
- AML.M0005Control Access to AI Models and Data at Rest
Verify identities before granting access to model registries so newly established accounts cannot automatically access protected AI artifacts.
- AML.M0019Control Access to AI Models and Data in Production
Verify identities before granting production AI access so newly established accounts cannot automatically access protected AI services.
Case studies that use it
- AML.CS0004Camera Hijack Attack on Facial Recognition System
- AML.CS0006ClearviewAI Misconfiguration
- AML.CS0027Organization Confusion on Hugging Face
- AML.CS0033Live Deepfake Image Injection to Evade Mobile KYC Verification
- AML.CS0034ProKYC: Deepfake Tool for Account Fraud Attacks
- AML.CS0065Model Namespace Reuse Supply Chain Attack
Related ATT&CK technique
ATLAS adapts this technique from MITRE ATT&CK Enterprise.