Activity timeline
T1555.006 first appeared in tracked threats on and was most recently reported on . The busiest month was 2026-10 with 5 reports, and 10 of the 10 threats were reported in the twelve months to 2026-10.
How adversaries use it
T1555.006 Cloud Secrets Management Stores is catalogued by MITRE ATT&CK under the Credential Access tactic in the Enterprise matrix, as a sub-technique of T1555 Credentials from Password Stores. Threadlinqs maps 10 of 3313 tracked threats (0.3%) to it; by severity that is 4 critical, 4 high, 2 medium.
Threats that use T1555.006 most often also use T1552.001 Credentials In Files (7 threats), T1078.004 Cloud Accounts (6 threats), T1528 Steal Application Access Token (6 threats), T1552.005 Cloud Instance Metadata API (6 threats), T1059.007 JavaScript (5 threats). These are the techniques an intrusion set tends to chain with it, so they are the natural next places to look when it is observed.
Mitigations
MITRE ATT&CK lists 1 mitigation for T1555.006.
Data sources
Telemetry that can reveal T1555.006, per MITRE ATT&CK.
- Cloud Service — Cloud Service Enumeration
Tracked threats
10 tracked threats use T1555.006.
- Shai-Hulud Self-Propagating Supply Chain Malware Campaign Targeting NPM, GitHub Actions and Release Pipelineshigh
- Credential Layer Exposure: Secrets Sprawl and Shai-Hulud npm Supply Chain Credential Harvesting (GitGuardian)medium
- Storm-0940 Uses ARTEX Agentic AI Framework in ConnectWise/SkyKick OAuth Supply-Chain Compromise of Microsoft…critical
- AI Agents Create an Unseen Credential Surface Exposing API Keys and Cloud Secretsmedium
- AWS AI Agent Vulnerabilities (Loom, SageMaker Unified Studio) Let Attackers Bypass Authentication and Steal…critical
- Autonomous AI Agent Operation (Strix, Cairn, Hermes) Steals 600K+ Payment Cards and Injects Skimmers into…critical
- Frontier AI Agents Compress Full Enterprise Intrusion Chain into Under 10 Hours (Unit 42 Investigation)high
- Token Jacking: Cybercriminals Steal and Resell AI API Keys/Tokens via Transfer Stationshigh
- 'ChainDrop' self-propagating worm compromises hundreds of popular npm packages (keyv, cacheable ecosystem)…critical
- First AI-Agent-Driven Cloud Intrusion — Marimo CVE-2026-39987 RCE → AWS Secrets Manager → SSH Bastion →…high
Detection coverage
Threadlinqs maintains 14 detection rules mapped to T1555.006 (SPL 5, KQL 7, Sigma 2). Rule content is available to Blue tier accounts and above; this page shows counts only.
Parent technique
T1555 Credentials from Password Stores — 471 tracked threats at the technique level.