🎯 Account manipulation

The items that name it 4

• FortiBleed Attackers Locking Victims Out of Fortinet Devices
  article2026-10-08

  Attackers create new accounts and delete existing accounts/passwords on compromised Fortinet devices to lock out legitimate users

• DataDog/pathfinding-labs
  repo2026-07-04It is written here as Account Manipulation: Additional Cloud Credentials.

  MITRE ATT&CK mapping given for an example lab (e.g., iam:CreateAccessKey on a privileged user) under Privilege Escalation, Persistence tactics

• BufferZoneCorp Malicious Gems & Go Modules
  writeup2026-05-06It is written here as Account Manipulation: SSH Authorized Keys.
• Employee Monitoring and SimpleHelp Software Abused in | Huntress
  writeup2026-02-11

  Suspicious net commands used for user enumeration, password resets, creating additional user accounts, disabling the Guest account, and enabling the built-in Administrator account.