T0867 Lateral Tool Transfer
ICSAdversaries may transfer tools or other files from one system to another to stage adversary tools or other files over the course of an operation. Copying of files may also be performed laterally between internal victim systems to support Lateral Movement with remote Execution using inherent file sharing protocols such as file sharing over SMB to connected network shares. In control systems environments, malware may use SMB and other file sharing protocols to move laterally through industrial networks.
platforms
Platforms this applies to.
mitigations
ATT&CK mitigations that reduce this.
detected by (4)
Data components that detect this.
countered by (D3FEND)
D3FEND countermeasures that counter this.
software (5)
Malware and tools associated with this.
targets assets (6)
ICS/OT assets this targets.
campaigns (3)
Campaigns that use this.
source
Where this definition is published.