T1098.005: Device Registration

T1098.005: Device Registration

Adversaries may register a device to an adversary-controlled account. Devices may be registered in a multifactor authentication (MFA) system, which handles authentication to the network, or in a device management system, which handles device access and compliance.

View on MITRE ATT&CK →

AWS CreateVirtualMFADevice

Creates a virtual MFA device that must be enabled separately for an IAM user.

Cloud Service: AWS - IAM

Tactics:

Persistence Privilege Escalation

Techniques:

T1098.005

Tags:

AWS IAM