Victim-owned websites

Info

ID: MS-T805
Tactic: Reconnaissance
MITRE technique: T1594

Attackers may look for storage accounts of a victim enterprise by searching its websites. Victim-owned website pages may be stored on a storage account or contain links to retrieve data stored in a storage account. The links contain the URL of the storage and provide an entry point into the account.