aol.pm

Customer Relationship Management Software

Subtechnique · ATTACK:enterprise:T1213.004

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:T1213.004",
  "title": "Customer Relationship Management Software",
  "type": "Subtechnique",
  "source_url": "https://attack.mitre.org/techniques/T1213/004",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--bbfbb096-6561-4d7d-aa2c-a5ee8e44c696",
  "external_id": "T1213.004",
  "domain": "enterprise",
  "created": "2024-07-01T20:06:13.664Z",
  "modified": "2025-04-15T22:12:49.744Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [
    "collection"
  ],
  "source_references": [
    {
      "source_name": "Bleeping Computer Bank Hack 2020",
      "url": "https://www.bleepingcomputer.com/news/security/customer-owned-bank-informs-100k-of-breach-exposing-account-balance-pii/"
    },
    {
      "source_name": "Bleeping Computer Mint Mobile Hack 2021",
      "url": "https://www.bleepingcomputer.com/news/security/mint-mobile-hit-by-a-data-breach-after-numbers-ported-data-accessed/"
    },
    {
      "source_name": "Bleeping Computer US Cellular Hack 2022",
      "url": "https://www.bleepingcomputer.com/news/security/uscellular-discloses-data-breach-after-billing-system-hack/"
    }
  ]
}

Explicit source assertions (6)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:M1018 → mitigates → ATTACK:enterprise:T1213.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--126bd2ee-5d66-4bdf-822a-3fa55dff1468

ATTACK:enterprise:C0059 → uses → ATTACK:enterprise:T1213.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1aa76367-d460-459d-90f7-a1b3a0677792

Google Salesforce JUN 2025

ATTACK:enterprise:M1017 → mitigates → ATTACK:enterprise:T1213.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--73d139f6-f976-4a5d-950d-adb2f0f1d242

ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1213.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8746c004-3a55-43d0-871e-ebbf792cc9cd

ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1213.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a50651b9-581a-4c77-b383-679a9c42e2b5

ATTACK:enterprise:T1213.004 → subtechnique-of → ATTACK:enterprise:T1213

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a8a181e0-74b8-42e2-96c7-a75e57cbb2fe

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.