Incident Score: Analysis & Impact (BIT1775688045)

Rankiteo's analysis has identified several MITRE ATT&CK tactics and techniques associated with this incident, each with varying levels of confidence based on available evidence. Under the Initial Access tactic, the analysis identified Valid Accounts (T1078) with moderate to high confidence (80%), supported by evidence indicating attackers compromised the company’s IT systems, gaining access to a digital-asset settlement account and Exploit Public-Facing Application (T1190) with moderate confidence (50%), supported by evidence indicating bitcoin ATM providers are frequent targets for cybercriminals. Under the Credential Access tactic, the analysis identified Unsecured Credentials (T1552) with moderate to high confidence (70%), supported by evidence indicating gaining access to a digital-asset settlement account and OS Credential Dumping (T1003) with moderate confidence (60%), supported by evidence indicating compromised the company’s IT systems. Under the Lateral Movement tactic, the analysis identified Remote Services (T1021) with moderate to high confidence (70%), supported by evidence indicating access to a digital-asset settlement account. Under the Exfiltration tactic, the analysis identified Exfiltration Over C2 Channel (T1041) with high confidence (90%), supported by evidence indicating hackers stole approximately 50.9 Bitcoin valued at $3.66 million. Under the Impact tactic, the analysis identified Data Encrypted for Impact (T1486) with lower confidence (40%), supported by evidence indicating unauthorized transfer of digital assets and Financial Theft (T1657) with high confidence (95%), supported by evidence indicating stole approximately 50.9 Bitcoin valued at $3.66 million. These correlations help security teams understand the attack chain and develop appropriate defensive measures based on the observed tactics and techniques.