MITRE ATLAS™ - Resource Development - Acquire Infrastructure

The Acquire Infrastructure tactic involves adversaries buying, leasing, or renting various resources ranging from cloud servers and domains to serverless functions to establish a functional environment for staging and executing their operations. By utilizing these solutions, attackers can effectively blend into legitimate network traffic, bypass security measures like Content Security Policies, and maintain a flexible operational footprint that is difficult for defenders to attribute to a specific actor. This tactic also extends to acquiring specialized components for AI-focused attacks, such as physical countermeasures like adversarial stickers to disrupt sensors and AI development workspaces for the high-compute staging of exploits. This process is like a spy renting a nondescript apartment and buying local clothes; it provides the necessary home base and disguise to operate effectively within a target environment without drawing unwanted attention. For more details, visit the official MITRE ATLAS page (https://atlas.mitre.org/techniques/AML.T0008) This video is a companion to the infographics page at https://thealmostrealmccoy123.github.io/mitre_atlas_infographics/resource_development/acquire_infrastructure.html (Use the following playlist link for the correct play order - https://www.youtube.com/playlist?list=PL1L5qBHEyIGgNholzDK_uY70UIabSke3n)