216.73.216.6

T1078.003: T1078.003

View on MITRE ATT&CK The MITRE Corporation · Published 13/03/2020 21:26 · Modified 27/03/2026 01:12

Essential information

MITRE technique ID
T1078.003
Confidence
100/100
Revoked
No
Published
13/03/2020 21:26
Modified
27/03/2026 01:12
Author / Source
The MITRE Corporation

Aliases

Local Accounts

Platforms

windows macos linux Network Devices Containers ESXi

Description

Adversaries may obtain and abuse credentials of a local account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Local accounts are those configured by an organization for use by users, remote support, services, or for administration on a single system or service. Local Accounts may also be abused to elevate privileges and harvest credentials through [OS Credential Dumping](https://attack.mitre.org/techniques/T1003). Password reuse may allow the abuse of local accounts across a set of machines on a network for the purposes of Privilege Escalation and Lateral Movement.

Kill chain phases

Kill chainPhase
mitre-attack defense-evasion
mitre-attack initial-access
mitre-attack persistence
mitre-attack privilege-escalation

Marking (TLP)

TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references

Related entities

Intrusion sets, malware, reports, vulnerabilities, indicators and other entities linked to this technique.