AML.T0087

MITRE ATLAS / Gather Victim Identity Information

Adversaries collect identity details about the victim organization and its people, including employee names, roles, email addresses, and credentials exposed in breaches, for use in later targeting.

Think of it likeCopying names off the staff photo board in a lobby so a later phone call sounds like it comes from a colleague.

In plain English

Knowing who works on the AI platform, what they are called, and how their email addresses are formed is what makes a later phishing message or account takeover attempt believable.