APT28G0007 ↗
Has exploited open Wi-Fi access points for initial access to target devices using the network.12
tfMITRE ATT&CK technique
Wi-Fi Networks T1669
- Tactic
- Initial Access
- Platforms
- Linux, Network Devices, Windows, macOS
- Version
- 1.0
- Created
- 25 February 2025
- Last modified
- 15 April 2025
- Contributors
- Cian Heasley; Menachem Goldstein
Adversaries may gain initial access to target systems by connecting to wireless networks. They may accomplish this by exploiting open Wi-Fi networks used by target devices or by accessing secured Wi-Fi networks — requiring Valid Accounts — belonging to a target organization.[1][2] Establishing a connection to a Wi-Fi access point requires a certain level of proximity to both discover and maintain a stable network connection.
ReconResource DevInitial AccessExecutionPersistencePriv EscStealthDef ImpairmentCred AccessDiscoveryLateral MoveCollectionC2ExfiltrationImpact
1
Threat groups45th pct
Threat groups45th percentile · 55% of ATT&CK techniques have more threat groups attributed.1
Campaigns72nd pct
Campaigns72nd percentile · 54% of ATT&CK techniques have fewer campaigns recorded.0
Tools & malwareNone recorded
Tools & malwareNone recorded · 29% of ATT&CK techniques have none either.0
Detection rulesNone recorded
Detection rulesNone recorded · 32% of ATT&CK techniques have none either.