Threat intelligence / Technique

Datasets

Adversaries may collect public datasets to use in their operations. Datasets used by the victim organization or datasets that are representative of the data used by the victim organization may be valuable to adversaries. Datasets can be stored in cloud storage, or on victim-owned websites. Some datasets require the adversary to [Establish Accounts](/techniques/AML.T0021) for access. Acquired datasets help the adversary advance their operations, stage attacks, and tailor attacks to the victim organization.

Technique

TypeTechnique

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

Adversaries may collect public datasets to use in their operations. Datasets used by the victim organization or datasets that are representative of the data used by the victim organization may be valuable to adversaries. Datasets can be stored in cloud storage, or on victim-owned websites. Some datasets require the adversary to [Establish Accounts](/techniques/AML.T0021) for access. Acquired datasets help the adversary advance their operations, stage attacks, and tailor attacks to the victim organization.

8 recorded

Relationships

mitigates

from Limit Model Artifact Release

Mitigation

subtechnique-of

to Acquire Public AI Artifacts

Technique

uses

from Attack on Machine Translation Services

Campaign

uses

from Confusing Antimalware Neural Networks

Campaign

uses

from Evasion of Deep Learning Detector for Malware C&C Traffic

Campaign

uses

from Face Identification System Evasion via Physical Countermeasures

Campaign

uses

from GPT-2 Model Replication

Campaign

uses

from Web-Scale Data Poisoning: Split-View Attack

Campaign

1 external

References

mitre-atlas

AML.T0002.000