ATLASAML.T0055
ATLAS index
AML.T0055

Unsecured Credentials

Adversaries may search compromised systems to find and obtain insecurely stored credentials. These credentials can be stored and/or misplaced in many locations on a system, including plaintext files (e.g. bash history), environment variables, operating system, or application specific repositories (e.g. Credentials in R

Framework
MITRE ATLAS
Maturity
Realized
Platforms
Enterprise
Release
2026.05

Overview

Adversaries may search compromised systems to find and obtain insecurely stored credentials. These credentials can be stored and/or misplaced in many locations on a system, including plaintext files (e.g. bash history), environment variables, operating system, or application-specific repositories (e.g. Credentials in Registry), or other specialized files/artifacts (e.g. private keys).

Sources

  1. MITRE ATLAS AML.T0055: Unsecured Credentials — MITRE