Activity timeline
T1552.007 first appeared in tracked threats on and was most recently reported on . The busiest month was 2026-04 with 4 reports, and 15 of the 15 threats were reported in the twelve months to 2026-10.
How adversaries use it
T1552.007 Container API is catalogued by MITRE ATT&CK under the Credential Access tactic in the Enterprise matrix, as a sub-technique of T1552 Unsecured Credentials. Threadlinqs maps 15 of 2623 tracked threats (0.6%) to it; by severity that is 10 critical, 5 high.
Threats that use T1552.007 most often also use T1552.001 Credentials In Files (13 threats), T1059.006 Python (9 threats), T1071.001 Web Protocols (9 threats), T1190 Exploit Public-Facing Application (9 threats), T1528 Steal Application Access Token (9 threats). These are the techniques an intrusion set tends to chain with it, so they are the natural next places to look when it is observed.
8 tracked threat actors appear in the threats that use T1552.007; the most frequent are TeamPCP (3), UNC1069 (2), APT38 (1), BonJoviGoesHard (1), Mini Shai-Hulud (1).
Mitigations
MITRE ATT&CK lists 4 mitigations for T1552.007.
Data sources
Telemetry that can reveal T1552.007, per MITRE ATT&CK.
- Command — Command Execution
- User Account — User Account Authentication
Threat actors using it
Tracked threats
15 tracked threats use T1552.007.
- Dell Container Storage Modules (CSM) flaws enable unauthenticated admin access and root on Kubernetes nodes…critical
- AI-Powered Attacks Targeting Siemens S7 Series PLCs in U.S. Critical Infrastructurecritical
- AI Agents Persist Through Failed Malware, Rewrite Tools Mid-Attack: SentinelLABS Documents Sandbox Escape…high
- 'ChainDrop' self-propagating worm compromises hundreds of popular npm packages (keyv, cacheable ecosystem)…critical
- NadMesh Botnet Hunts Exposed AI Services (ComfyUI, Ollama, n8n, Open WebUI, Langflow, Gradio) for…high
- FulcrumSec Double-Extortion Data Theft of Global Schools Foundation (GSF) EdTech Network via Unrotated 2022…high
- Agentic Threat Actor Container Escape — AI Agent-Driven marimo CVE-2026-39987 RCE → Docker Socket → Host…critical
- Gitea Container Registry Authorization Bypass (CVE-2026-27771) — Unauthenticated Pull of Private Container…high
- Backdoored Cemu v2.6 GitHub Release — TeamPCP Supply Chain Campaign Extends to Cemu Nintendo Wii U Emulator…high
- Mini Shai-Hulud v3 — TanStack/UiPath/Mistral AI npm & PyPI Supply Chain Compromise (TeamPCP)critical
- PCPJack Worm — Cloud Credential Theft Framework Evicting TeamPCP Infections (CVE-2025-29927, CVE-2025-55182…critical
- Xinference PyPI Supply Chain Compromise — TeamPCP-Marked Credential Harvester (v2.6.0–2.6.2)critical
- Bissa Scanner — AI-Assisted Mass Exploitation of CVE-2025-55182 (React Server Components RCE) and…critical
- Axios npm Supply Chain Compromise — Malicious axios@1.14.1 and axios@0.30.4 Inject plain-crypto-js@4.2.1 RAT…critical
- Axios npm Supply Chain Compromise (v1.14.1 / v0.30.4) Reaches OpenAI macOS Signing Pipeline, Forces Apple…critical
Detection coverage
Threadlinqs maintains 32 detection rules mapped to T1552.007 (SPL 13, KQL 13, Sigma 6). Rule content is available to Blue tier accounts and above; this page shows counts only.
Parent technique
T1552 Unsecured Credentials — 551 tracked threats at the technique level.