T1474.001 Compromise Software Dependencies and Development Tools

sub-techniqueMobile

Adversaries may manipulate products or product delivery mechanisms prior to receipt by a final consumer for the purpose of data or system compromise. Applications often depend on external software to function properly. Popular open source projects that are used as dependencies in many applications may be targeted as a means to add malicious code to users of the dependency.

01

platforms

Platforms this applies to.

AndroidiOS
02

sub-technique of

The broader entity this sits under.

03

mitigations

ATT&CK mitigations that reduce this.

05

software (1)

Malware and tools associated with this.

06

source

Where this definition is published.