2022-07-02 00:28:52 -04:00
{
"type" : "bundle" ,
2022-07-03 19:59:09 -04:00
"id" : "bundle--e684d3e4-90fc-4e8d-aba3-859125963534" ,
2022-07-02 00:28:52 -04:00
"objects" : [
{
"type" : "attack-pattern" ,
"spec_version" : "2.1" ,
2022-07-03 19:59:09 -04:00
"id" : "attack-pattern--32ddaf21-ebef-4270-9416-d9ef74bd23f6" ,
"created_by_ref" : "identity--f1a0f560-2d9e-4c5d-bf47-7e96e805de82" ,
"created" : "2022-07-03T23:52:02.927833Z" ,
"modified" : "2022-07-03T23:52:02.927833Z" ,
2022-07-02 00:28:52 -04:00
"name" : "Redirect URLs" ,
2022-07-02 16:01:17 -04:00
"description" : "An influence operation may redirect its falsified or typosquatted URLs to legitimate websites to increase the operation's appearance of legitimacy, complicate attribution, and avoid detection. " ,
2022-07-02 00:28:52 -04:00
"kill_chain_phases" : [
{
"kill_chain_name" : "mitre-attack" ,
"phase_name" : "persist-in-the-information-environment"
}
] ,
"external_references" : [
{
2022-07-03 19:59:09 -04:00
"source_name" : "mitre-attack" ,
2022-07-02 00:28:52 -04:00
"url" : "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.008.md" ,
"external_id" : "T0129.008"
}
] ,
"object_marking_refs" : [
2022-07-03 19:59:09 -04:00
"marking-definition--f79f25d2-8b96-4580-b169-eb7b613a7c31"
2022-07-02 00:28:52 -04:00
] ,
"x_mitre_is_subtechnique" : true ,
"x_mitre_platforms" : [
"Windows" ,
"Linux" ,
"Mac"
] ,
2022-07-03 19:59:09 -04:00
"x_mitre_version" : "2.1"
2022-07-02 00:28:52 -04:00
}
]
}