Crosswalk

PH!SH in the MITRE ATT&CK® matrix

Every ATT&CK technique referenced by the PH!SH crosswalk, laid out under its ATT&CK tactic. The count and bar on each cell show how many PH!SH entries map to that technique.

Enterprise ATT&CK v19

Export Navigator layer

Export the layer to open this coverage in ATT&CK Navigator alongside your other layers. The exported layer marks a technique under every ATT&CK tactic it belongs to.

Reconnaissance

7 techniques

Gather Victim Identity Information

Email Addresses

Phishing for Information

Spearphishing Link

Spearphishing Voice

Resource Development

7 techniques

Artificial Intelligence

Generate Content

Initial Access

6 techniques

Spearphishing Attachment

Spearphishing Link

Spearphishing via Service

Spearphishing Voice

Execution

6 techniques

Command and Scripting Interpreter

Malicious Copy and Paste

Stealth

14 techniques

Obfuscated Files or Information

Invisible Unicode

Right-to-Left Override

Double File Extension

Masquerade File Type

Virtualization/Sandbox Evasion

Social Engineering

Defense Impairment

1 technique

Mark-of-the-Web Bypass

Credential Access

4 techniques

Multi-Factor Authentication Interception

Steal Web Session Cookie

Adversary-in-the-Middle

Multi-Factor Authentication Request Generation

Lateral Movement

1 technique

Internal Spearphishing

Impact

1 technique

Financial Theft