CAPEC-558 Replace Trusted Executable

abstraction: detailedstatus: active

An adversary exploits weaknesses in privilege management or access control to replace a trusted executable with a malicious version and enable the execution of malware when that trusted executable is called.

likelihood: Lowseverity: High
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

ATT&CK techniques

ATT&CK techniques this enables or maps to.

03

related attack patterns (1)

Related entries.

04

source

Where this definition is published.