TACTIC: RESOURCE DEVELOPMENT
Domains (T1583.001): real cases
MITRE Definition ↗ Adversaries register typo-squatted or deceptively named domain names for phishing campaigns.
Key Facts
Technique ID
T1583.001
Resource Development
Mapped Cases
1
Primary sources
Related Laws
0
Criminal statutes
- ATT&CK Technique Identifier: T1583.001.
- Tactical Phase: Resource Development.
- Substantiated in 1 primary court prosecution cases.
- Every associated case includes verbatim evidentiary excerpts from indictments or sworn affidavits.
Verified Evidentiary Case Records
U.S. v. Netyksho et al. (APT28 / GRU Unit 26165 DNC Hack)
fugitive 2018-07-13
Primary Source Evidence Excerpt: Indictment ¶ 28, Page 12
"GRU officers registered misleading domain names such as dcleaks.com and actblues.com using cryptocurrency to stage leaks."
U.S. District Court for the District of Columbia
View full case dossier →