CAPEC-185 Malicious Software Download

abstraction: standardstatus: active

An attacker uses deceptive methods to cause a user or an automated process to download and install dangerous code that originates from an attacker controlled source. There are several variations to this strategy of attack.

severity: Very High
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.