Bidda Sovereign Intelligence · 10,108 Verified Nodes · 39 Sovereign Pillars

MITRE ATLAS Gather Victim Identity Information (AML.T0087) - Adversarial use of Gather Victim Identity Information as adapted in MITRE ATT&CK T1589

This node addresses MITRE ATLAS technique AML.T0087 (Gather Victim Identity Information). Adversaries may gather information about the victim's identity…

What MITRE ATLAS Gather Victim Identity Information (AML.T0087) - Adversarial use of Gather Victim Identity Information as adapted in MITRE ATT&CK T1589 requires

This node addresses MITRE ATLAS technique AML.T0087 (Gather Victim Identity Information). Adversaries may gather information about the victim's identity that can be used during targeting. Information about identities may include a variety of details, including personal data (ex: employee names, email addresses, photos, etc.) as well as sensitive details such as credentials or multi-factor authentication (MFA) configurations. Adversaries may gather this information in various ways, such as direct elicitation, Search Victim-Owned Websites, or via leaked information on the black market. Adversaries may use the gathered victim data to Create Deepfakes and impersonate them in a convincing manner. This may create opportunities for adversaries to Establish Accounts under the impersonated identity, or allow them to perform convincing Phishing attacks. Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow. ATT&CK reference: T1589 provides authoritative mitigation guidance for this technique class.

Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:

Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml

SHA-256 integrity: 114814a6ffeb687c47665b4c7ac9e6a91e62c6bc2a9270788eddeb20757d119c

Primary Citations — 6 traced to source

  • MITRE ATLAS - Gather Victim Identity Information (AML.T0087), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.T0087, AML.T0087 technique entry, 2026
  • EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024

+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

⚠ Important: Human Verification Required

Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.