Engage Goals: EGO0003 Elicit
Engage Approach: EAP0001 Collect
Engage Actions: EAC0003 System Activity Monitoring, EAC0015 Information Manipulation
Name of Element: Deceptive Browser Extension
Description of Element:
Goal: Gather information about web-based attacks by deploying a deceptive browser extension.
Approach: Collecting data on attacker activity through a deceptive browser extension.
This element involves creating a browser extension that mimics legitimate functionality but secretly collects information about attacker activity.
Technical Context:
This element leverages the browser’s extension framework to monitor user interactions and network traffic. It can be used to capture keystrokes, screenshots, or even redirect attackers to a controlled environment.
Other:
This element can be used to gather valuable intelligence about web-based attacks, such as phishing campaigns, drive-by downloads, or cross-site scripting attempts.