PH!SH Framework
Framework / Techniques
Technique Data Harvesting

Direct Data Harvesting

A page or form presented by the message collects sensitive information, such as sign-in details, payment details, or identity documents. What people type in goes to whoever runs the form.

Also known as
Broader terms
  • Phishing for Information
  • counterfeit website
Mapped to
MITRE ATT&CK®
T1598.003Spearphishing Link

Sub-techniques

TE0015.1 Login Credential Collection
A page or form collects account sign-in details, such as a password, a one-time code, or a recovery code. Whatever is entered goes to whoever runs the form, who can use it to sign in to the account.
TE0015.2 Payment Information Collection
A page or form collects card details, a card security code, or bank account information. Details entered here reach whoever runs the form and can be used to make unauthorized payments.

Connected in PH!SH

Themes
TH0001Media Service Impersonation TH0003Cryptocurrency Service Impersonation TH0004Travel Service Impersonation TH0006Logistics Service Impersonation TH0007Financial Institution Impersonation TH0008Social Media Service Impersonation TH0019Voicemail Notification TH0020Fax Notification TH0021Survey or Feedback Request TH0024Cryptocurrency Balance Claim TH0025Website and Domain Hosting Service Impersonation TH0026AI Service Impersonation TH0027Telecommunications Service Impersonation TH0028Benefits Service Impersonation TH0030Utility Service Impersonation TH0031Apple Impersonation TH0032Google Impersonation TH0041Secure Message Notification TH0048Health Service Impersonation TH0051Technical Support Pretext TH0056Employment Terms and Compensation Notice TH0057Workplace Policy or Training Acknowledgment TH0058Adverse Employment Notice TH0059Document Review or Signature Request TH0060Customer Support Case or Complaint TH0062Retail and Marketplace Service Impersonation TH0063Educational Institution Impersonation TH0064Electronic Signature Service Impersonation TH0065Job Portal Impersonation TH0070Insurance Service Impersonation TH0073Team or Task Assignment Notice