Victim Enumerations. Over 1. 00. 00. 0 Over 1. Small Small organizations 1,0. Large Large organizations over 1,0. Unknown Unknown number of employees. Actor Enumerations. NA Not Applicable unintentional actionEspionage Espionage or competitive advantage. Fear Fear or duress. Financial Financial or personal gain. Fun Fun, curiosity, or pride. Grudge Grudge or personal offense. Ideology Ideology or protest. Convenience Convenience of expediency. Unknown Unknown. Other Other. Note actor. Activist Activist group. Auditor Auditor. Competitor Competitor. Customer Customer B2. Powtoon Software Free Download there. CForce majeure Force majeure nature and chanceFormer employee Former employee no longer had accessNation state Nation state. Organized crime Organized or professional criminal group. Acquaintance Relative or acquaintance of employee. State affiliated State sponsored or affiliated group. Terrorist Terrorist group. Unaffiliated Unaffiliated personsUnknown Unknown. Other Other. actor. Auditor Auditor. Call center Call center staff. Cashier Cashier, teller, or waiter. End user End user or regular employee. Executive Executive or upper management. Finance Finance or accounting staff. Helpdesk Helpdesk staff. Human resources Human resources staff. Maintenance Maintenance or janitorial staff. Manager Manager or supervisor. Guard Security guard. Developer Software developer. System admin System or network administrator. Unknown Unknown. Other Other. Action Enumerations. Adware Adware. Backdoor Backdoor enable remote accessBrute force Brute force attack. Capture app data Capture data from application or system process. Capture stored data Capture data stored on system disk. View and Download ITransact user manual online. Payment gateway. ITransact Gateway pdf manual download. Introduction VX670 Terminal This manual covers the Vx670 mobile and portable terminal operating via Gprs or Wi Fi connectivity. Although the terminal can. Visa, MasterCard, Amex, and Discover logos for use on your website. Cvv2 Software Download' title='Cvv2 Software Download' />Client side attack Client side or browser attack e. XSS, Mit. BClick fraud Click fraud or Bitcoin mining. C2 Command and control C2Destroy data Destroy or corrupt stored data. Disable controls Disable or interfere with security controls. Do. S Denial of Service attack. Downloader Downloader pull updates or other malwareExploit vuln Exploit vulnerability in code vs misconfig or weaknessExport data Export data to another site or system. Packet sniffer Packet sniffer capture data from networkPassword dumper Password dumper extract credential hashesRam scraper Ram scraper or memory parser capture data from volatile memoryRansomware Ransomware encrypt or seize stored dataRootkit Rootkit maintain local privileges and stealthScan network Scan or footprint network. Spam Send spam. SpywareKeylogger Spyware, keylogger or form grabber capture user input or activitySQL injection SQL injection attack. Adminware System or network utilities e. Ps. Tools, NetcatWorm Worm propagate to other systems or devicesUnknown Unknown. Other Other. action. Direct install Directly installed or inserted by threat agent after system accessDownload by malware Downloaded and installed by local malware. Email autoexecute Email via automatic execution. Email link Email via embedded link. Email attachment Email via user executed attachment. Instant messaging Instant Messaging. Network propagation Network propagation. Remote injection Remotely injected by agent i. SQLiRemovable media Removable storage media or devices. Web drive by Web via auto executed or drive by infection. Web download Web via user executed or downloaded content. Unknown Unknown. Other Other. Abuse of functionality Abuse of functionality. Brute force Brute force or password guessing attacks. Buffer overflow Buffer overflow. Cache poisoning Cache poisoning. Session prediction Credential or session prediction. CSRF Cross site request forgery. XSS Cross site scripting. Cryptanalysis Cryptanalysis. Do. S Denial of service. Footprinting Footprinting and fingerprinting. Forced browsing Forced browsing or predictable resource location. Format string attack Format string attack. Fuzz testing Fuzz testing. HTTP request smuggling HTTP request smuggling. HTTP request splitting HTTP request splitting. Integer overflows Integer overflows. LDAP injection LDAP injection. Mail command injection Mail command injection. Mit. M Man in the middle attack. Null byte injection Null byte injection. Offline cracking Offline password or key cracking e. Hashcat, Jt. ROS commanding OS commanding. Path traversal Path traversal RFI Remote file inclusion. Reverse engineering Reverse engineering. Routing detour Routing detour Session fixation Session fixation. Session replay Session replay. Soap array abuse Soap array abuse. Special element injection Special element injection. SQLi SSI injection SSI injection. URL redirector abuse URL redirector abuse. Use of backdoor or C2 Use of stolen creds XML attribute blowup XML attribute blowup. XML entity expansion XML entity expansion. XML external entities XML external entities. XML injection XML injection. XPath injection XPath injection. XQuery injection XQuery injection. Virtual machine escape Virtual machine escape. Unknown Unknown. Other Other. Log. Me. In, Go. 2AssistBackdoor or C2 Backdoor or command and control channel. Desktop sharing Graphical desktop sharing RDP, VNC, PCAnywhere, CitrixPhysical access Physical access or connection i. Command shell Remote shell. Partner Partner connection or credential. VPN VPNWeb application Web application. Unknown Unknown. Other Other. Baiting Baiting planting infected mediaBribery Bribery or solicitation. Elicitation Elicitation subtle extraction of info through conversationExtortion Extortion or blackmail. Forgery Forgery or counterfeiting fake hardware, software, documents, etcInfluence Influence tactics Leveraging authority or obligation, framing, etcScam Online scam or hoax e. Phishing Phishing or any type of ishingPretexting Pretexting dialogue leveraging invented scenarioPropaganda Propaganda or disinformation. Spam Spam unsolicited or undesired email and advertisementsUnknown Unknown. Other Other. action. Documents Documents. Email Email. In person In person. IM Instant messaging. Phone Phone. Removable media Removable storage media. SMS SMS or texting. Social media Social media or networking. Software Software. Website Website. Unknown Unknown. Other Other. action. Auditor Auditor. Call center Call center staff. Cashier Cashier, teller, or waiter. Customer Customer B2. CEnd user End user or regular employee. Executive Executive or upper management. Finance Finance or accounting staff. Former employee Former employee. Helpdesk Helpdesk staff. Human resources Human resources staff. Maintenance Maintenance or janitorial staff. Manager Manager or supervisor. Partner Partner B2. BGuard Security guard. Developer Software developer. System admin System or network administrator. Unknown Unknown. Other Other. Knowledge abuse Abuse of private or entrusted knowledge. Privilege abuse Abuse of system access privileges. Embezzlement Embezzlement, skimming, and related fraud. Data mishandling Handling of data in an unapproved manner. Email misuse Inappropriate use of email or IMNet misuse Inappropriate use of network or Web access. Illicit content Storage or distribution of illicit content. Unapproved workaround Unapproved workaround or shortcut. Unapproved hardware Use of unapproved hardware or devices. Unapproved software Use of unapproved software or services. Unknown Unknown. Other Other. Physical access Physical access within corporate facility.