CAPEC-186 Malicious Software Update
abstraction: standardstatus: activeAn adversary uses deceptive methods to cause a user or an automated process to download and install dangerous code believed to be a valid update that originates from an adversary controlled source.
severity: High
01
weaknesses (1)
The CWE weakness classes this flaw belongs to.
02
ATT&CK techniques
ATT&CK techniques this enables or maps to.
03
related attack patterns (5)
Related entries.
04
source
Where this definition is published.