Avatier

Identity attack glossary

41 terms for the ways attackers get in through identity, grouped by attack vector. Each has a plain definition, a real example with its source, and how to stop it.

Phished or stolen credentials

Social engineering of a person

Third-party or contractor access

MFA bypass

Session or token theft

Orphaned or dormant accounts

Over-provisioned standing access

Service-account or non-human identity abuse

SSO, IdP, or federation compromise

Attack outcomes