John, a professional hacker, is trying to perform APT attack on the target organization network. He gains access to a single system of a target organization and tries to obtain administrative login credentials to gain further access to the systems in the network using various techniques.
What phase of the advanced persistent threat lifecycle is John currently in?
John is currently in the expansion phase of the advanced persistent threat lifecycle. This phase involves gaining further access to other systems in the network after obtaining initial access. By attempting to obtain administrative login credentials, John is trying to move laterally within the network, which is characteristic of this phase.
Answer is C As per Module 02 Page 102 of CTIA Courseware
C correct ECC page 102
C correct ECC page 102