Procedure examples

APT38 has used brute force techniques to attempt account access when passwords are unknown or when password hashes are unavailable.

APT41 performed password brute-force attacks on the local admin account.

Dragonfly has attempted to brute force credentials to gain access.

APT39 has used Ncrack to reveal credentials.

OilRig has used brute force techniques to obtain credentials.

Turla may attempt to connect to systems within a victim's network using net use commands and a predefined list or collection of passwords.

Storm-0501 has leveraged brute force attacks to obtain credentials.

DarkVishnya used brute-force attack to obtain login data.

FIN5 has has used the tool GET2 Penetrator to look for remote login and hard-coded credentials.

Ember Bear used the `su-bruteforce` tool to brute force specific users using the `su` command.

Agrius engaged in various brute forcing activities via SMB in victim environments.

APT28 can perform brute force attacks to obtain credentials.

Fox Kitten has brute forced RDP credentials.

VOID MANTICORE has conducted brute-force attempts against organizational VPN infrastructure.

HEXANE has used brute force attacks to compromise valid credentials.

ShinyHunters has performed brute force attacks against edge devices, such as VPNs or firewall solutions.