T1474.003 Compromise Software Supply Chain

sub-techniqueMobile

Adversaries may manipulate application software prior to receipt by a final consumer for the purpose of data or system compromise. Supply chain compromise of software can take place in a number of ways, including manipulation of the application source code, manipulation of the update/distribution mechanism for that software, or replacing compiled releases with a modified version.

01

platforms

Platforms this applies to.

AndroidiOS
02

sub-technique of

The broader entity this sits under.

03

mitigations

ATT&CK mitigations that reduce this.

05

software (5)

Malware and tools associated with this.

06

source

Where this definition is published.