#T1056 Input Capture
Technique
- Tactics: Collection, Credential Access
- Description:
Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. [Credential API Hooking](https://attack.mitre.org/techniques/T1056/004)) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. [Web Portal Capture](https://attack.mitre.org/techniques/T1056/003)).
- First Seen: Lazarus Group • 2017-05-31
-
14
Tagged Reports
-
12
Unique Authors
-
3,285
Active Days
Tagged Reports
2024-07-19
Cyfirma
2022-04-29
PWC
2022-04-15
Dragos
2020-08-26
USCISA
2019-08-26
MITRE
2017-05-31
MITRE