Skip to content
flowss
Start freeChecking your session
Attack tree (cybersec) templates

Account Takeover (Attack Tree)

Attack paths to take over a bank account.

Attack tree (cybersec)Operations & OpsAttack tree (cybersec) syntax docs
Template previewAttack tree (cybersec)
Commit account takeoverGOALcost 1Take over a bank accountORcost 2Steal credentialsLEAFcost 2Phishing sitelowdet mediumLEAFcost 3Malware keyloggermediumdet mediumORcost 2Bypass 2FALEAFcost 4SIM swapmediumdet highLEAFcost 2OTP phishinglowdet mediumANDcost 1Move fundsLEAFcost 1Add payee and transferlowdet high

Make it your own.

title "Commit account takeover"
goal G "Take over a bank account"
OR   G1 "Steal credentials" parent G
OR   G2 "Bypass 2FA" parent G
AND  G3 "Move funds" parent G
leaf L1 "Phishing site" parent G1 cost 2 skill low detect medium
leaf L2 "Malware keylogger" parent G1 cost 3 skill medium detect medium
leaf L3 "SIM swap" parent G2 cost 4 skill medium detect high
leaf L4 "OTP phishing" parent G2 cost 2 skill low detect medium
leaf L5 "Add payee and transfer" parent G3 cost 1 skill low detect high