AML.T0008.002 sub-technique demonstrated

Domains

Sub-technique of AML.T0008 — Acquire Infrastructure

Resource Development ATT&CK T1583.001 View on ATLAS ↗

Adversaries may acquire domains that can be used during targeting. Domain names are the human readable names used to represent one or more IP addresses. They can be purchased or, in some cases, acquired for free.

Adversaries may use acquired domains for a variety of purposes (see ATT&CK). Large AI datasets are often distributed as a list of URLs to individual datapoints. Adversaries may acquire expired domains that are included in these datasets and replace individual datapoints with poisoned examples (Publish Poisoned Datasets).

> curated attacks (1)

Research high 2024-06-06

Web-Scale Data Poisoning: The Split-View Attack

Web-scale datasets distributed as lists of URLs can be poisoned by buying expired domains behind those URLs. What researchers downloaded when the dataset was built differs from what later trainers fetch — cheaply poisoning real training corpora.