CAPEC-670 Software Development Tools Maliciously Altered

Abstraktion: detailedStatus: active

An adversary with the ability to alter tools used in a development environment causes software to be developed with maliciously modified tools. Such tools include requirements management and database tools, software design tools, configuration management tools, compilers, system build tools, and software performance testing and load testing tools. The adversary then carries out malicious acts once the software is deployed including malware infection of other systems to support further compromises.

Wahrscheinlichkeit: LowSchweregrad: High
01

ATT&CK-Techniken

ATT&CK-Techniken, die dies ermöglicht oder abbildet.

02

verwandte Angriffsmuster (1)

Verwandte Einträge.

03

Quelle

Wo diese Definition veröffentlicht ist.