T0860 Wireless Compromise

ICS

Adversaries may perform wireless compromise as a method of gaining communications and unauthorized access to a wireless network. Access to a wireless network may be gained through the compromise of a wireless device. Adversaries may also utilize radios and other wireless communication devices on the same frequency as the wireless network. Wireless compromise can be done as an initial access vector from a remote distance. A Polish student used a modified TV remote controller to gain access to and control over the Lodz city tram system in Poland. The remote controller device allowed the student to interface with the trams network to modify track settings and override operator control. The adversary may have accomplished this by aligning the controller to the frequency and amplitude of IR control protocol signals. The controller then enabled initial access to the network, allowing the capture and replay of tram signals.

01

Plattformen

Plattformen, für die dies gilt.

EmbeddedWindowsLinux
02

Gegenmaßnahmen

ATT&CK-Gegenmaßnahmen, die dies verringern.

05

Betroffene Anlagen (2)

ICS/OT-Anlagen, auf die dies zielt.

06

Kampagnen (1)

Kampagnen, die dies verwenden.

07

Quelle

Wo diese Definition veröffentlicht ist.