Crosswalk

PH!SH in the MITRE ATT&CK® matrix

Every ATT&CK technique referenced by the PH!SH crosswalk, laid out under its ATT&CK tactic. The count and bar on each cell show how many PH!SH entries map to that technique.

Enterprise ATT&CK v20

Export Navigator layer

Export the layer to open this coverage in ATT&CK Navigator alongside your other layers. The exported layer marks a technique under every ATT&CK tactic it belongs to.

Reconnaissance

4 techniques

Email Addresses

Phishing for Information

Spearphishing Link

Spearphishing Voice

Resource Development

6 techniques

Artificial Intelligence

Generate Content

Initial Access

6 techniques

Spearphishing Attachment

Spearphishing Link

Spearphishing via Service

Spearphishing Voice

Execution

8 techniques

Windows Command Shell

Malicious Copy and Paste

Indirect Prompt Injection

Stealth

11 techniques

Obfuscated Files or Information

Encrypted/Encoded File

Right-to-Left Override

Double File Extension

Social Engineering

Defense Impairment

1 technique

Mark-of-the-Web Bypass

Credential Access

5 techniques

Multi-Factor Authentication Interception

Steal Application Access Token

Steal Web Session Cookie

Adversary-in-the-Middle

Multi-Factor Authentication Request Generation

Lateral Movement

1 technique

Internal Spearphishing

Impact

2 techniques

Financial Theft