AML.T0021

MITRE ATLAS / Establish Accounts

Adversaries create accounts with services for use in targeting, to obtain the access needed for attack staging, or to impersonate a victim. Accounts on model hubs, cloud platforms, and social services all serve this purpose.

Think of it likeOpening a bank account under a business name you invented, purely so the paperwork looks legitimate later.

In plain English

A brand new account on a model hub or cloud platform costs nothing and gives an attacker a legitimate-looking identity to publish from, request quota with, or impersonate someone under.