Skip to content

Resource hijacking

Info

ID: MS-TA7031
Tactic: Impact
MITRE technique: T1496

Attackers may leverage the compute, network, or storage resources of the application for unauthorized purposes, such as cryptocurrency mining, mass scanning, or traffic proxying.

Mitigations

ID Mitigation Description
MS-M7037 Restrict outbound network access Limit outbound traffic from applications and functions to explicitly approved domains or IP ranges to prevent misuse.
MS-M7045 Use compute reservations Limit scaling behavior with autoscaling limits.
MS-M7044 Implement resource quotas and concurrency limits Set maximum CPU, memory, execution time, and concurrency limits on serverless functions and applications.