T0873.001 Siemens Project File Format
sub-techniqueICSAdversaries may infect Siemens PLC project files (i.e., Step 7, WinCC, etc.) to achieve Execution, Persistence, and Lateral Movement objectives. Adversaries may modify an existing project file or bring their own project files into the environment. The ability for an adversary to deploy an infected project file relies on access to a workstation with Siemens PLC programming software installed on it from which a program download can be performed.
01
platforms
Platforms this applies to.
WindowsLinux
02
sub-technique of
The broader entity this sits under.
03
mitigations
ATT&CK mitigations that reduce this.
04
detected by (2)
Data components that detect this.
05
software (1)
Malware and tools associated with this.
06
targets assets (1)
ICS/OT assets this targets.
07
source
Where this definition is published.