T1695 Block Communications

ICS

Operational technology communications occur over serial COM, Ethernet, Wi-Fi, cellular (4G/5G), and satellite mediums. Adversaries may block communications to prevent reporting messages and command messages from reaching their intended target devices disrupting processes, operations, and causing cyber-physical impacts. Adversaries may block communications by either making modifications to software (System Firmware, Module Firmware, Hooking, and Rootkit) and services (Service Stop, Denial of Service) on systems and devices or by positioning themselves between systems and devices and intercepting and blocking the communications such as the case with an Adversary-in-the-Middle attack.

01

platforms

Platforms this applies to.

EmbeddedWindowsLinuxNetwork Devices
02

sub-techniques (3)

More specific entries beneath this one.

03

mitigations

ATT&CK mitigations that reduce this.

05

groups (1)

Threat groups associated with this.

07

source

Where this definition is published.