Attack tree — steal user credentials

title "Steal user credentials"
goal G "Steal user credentials"
OR   G1 "Phishing"          parent G
AND  G2 "Server compromise" parent G
OR   G3 "Credential stuffing" parent G
leaf L1 "Send phishing email"     parent G1 cost 1 skill low    detect medium
leaf L2 "User clicks link"        parent G1 cost 0 skill none   detect low
leaf L3 "Exploit RCE on web"      parent G2 cost 5 skill high   detect medium
leaf L4 "Dump password DB"        parent G2 cost 2 skill medium detect high
leaf L5 "Buy leaked credentials"  parent G3 cost 3 skill low    detect low
leaf L6 "Spray common passwords"  parent G3 cost 1 skill low    detect medium