CAPEC-443 Malicious Logic Inserted Into Product by Authorized Developer

abstraction: detailedstatus: active

An adversary uses their privileged position within an authorized development organization to inject malicious logic into a codebase or product.

likelihood: Mediumseverity: High
01

ATT&CK techniques

ATT&CK techniques this enables or maps to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.