About this interactive
What you are doing: placing each preparation an attacker makes into one of the four resource-development techniques.
The lesson’s four moves: acquire access means buying or trading a way in — paying for working credentials so they can skip the break-in. Acquire infrastructure means standing up their own servers, domains, DNS and ad space for the operation. Compromise existing resources means taking over someone else’s accounts or infrastructure instead of standing up their own. Develop capabilities means building the malware and tools, and the knowledge and skill to use them.
How to use it: the sharp line is acquire versus compromise. If they paid for or built the resource, it is acquire. If they stole or hijacked an existing one, it is compromise.
What you'll learn
- Sort a move an adversary makes during weaponization (MITRE ATT&CK resource development) into the technique it belongs to: acquiring access, acquiring infrastructure, compromising existing resources, or developing capabilities
- Tell apart acquiring a resource (buying or standing one up) from compromising an existing one (stealing or hijacking someone else’s)
Aligned to
CompTIA Security+
2.2
Explain common threat vectors and attack surfaces.
CompTIA CySA+
3.1
Explain concepts related to attack methodology frameworks.
Key terms
- Weaponization
- The phase of the cyber kill chain where an attacker creates, obtains, or modifies malware and other tools necessary to carry out an attack.
- Access Broker
- A cybercriminal intermediary who buys, sells, and trades unauthorized access to systems, including stolen credentials and login information.
- Malware
- Software specifically designed to disrupt, damage, or gain unauthorized access to a system.
- Exploit
- A piece of software or technique that takes advantage of a vulnerability to gain unauthorized access or cause harm.
Topics
Weaponization
Interactive
Categorize
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →