T1693.001 System Firmware
sub-techniqueICSSystem firmware on modern assets is often designed with an update feature. Older device firmware may be factory installed and require special reprograming equipment. When available, the firmware update feature enables vendors to remotely patch bugs and perform upgrades. Device firmware updates are often delegated to the user and may be done using a software update package. It may also be possible to perform this task over the network. An adversary may exploit the firmware update feature on accessible devices to upload malicious or out-of-date firmware. Malicious modification of device firmware may provide an adversary with root access to a device, given firmware is one of the lowest programming abstraction layers.
platforms
Platforms this applies to.
sub-technique of
The broader entity this sits under.
mitigations
ATT&CK mitigations that reduce this.
detected by (7)
Data components that detect this.
software (1)
Malware and tools associated with this.
targets assets (10)
ICS/OT assets this targets.
campaigns (3)
Campaigns that use this.
source
Where this definition is published.