CAPEC-473 Signature Spoof

abstraction: standardstatus: active

An attacker generates a message or datablock that causes the recipient to believe that the message or datablock was generated and cryptographically signed by an authoritative or reputable source, misleading a victim or victim operating system into performing malicious actions.

weaknesses (3)

The CWE weakness classes this flaw belongs to.

CWE-20Improper Input Validation
CWE-290Authentication Bypass by Spoofing
CWE-327Use of a Broken or Risky Cryptographic Algorithm

ATT&CK techniques

ATT&CK techniques this enables or maps to.

T1036.001Invalid Code Signature
T1553.002Code Signing

related attack patterns (8)

Related entries.

CAPEC-151Identity Spoofing
CAPEC-459Creating a Rogue Certification Authority Certificate
CAPEC-474Signature Spoofing by Key Theft
CAPEC-475Signature Spoofing by Improper Validation
CAPEC-476Signature Spoofing by Misrepresentation
CAPEC-477Signature Spoofing by Mixing Signed and Unsigned Content
CAPEC-479Malicious Root Certificate
CAPEC-485Signature Spoofing by Key Recreation

source

Where this definition is published.

MITRE CAPEC