CAPECattack pattern

CAPEC-185 Malicious Software Download

Very High Official page ↗
Abstraction
Standard
Status
Draft
Typical severity
Very High
CAPEC version
3.9

Description

An attacker uses deceptive methods to cause a user or an automated process to download and install dangerous code that originates from an attacker controlled source. There are several variations to this strategy of attack.

Related

Can precede · CAPEC (1)

  • CAPEC-662 Adversary in the Browser (AiTB) attack pattern

Child of · CAPEC (1)

  • CAPEC-184 Software Integrity Attack attack pattern

Weakness · CWE (1)

  • CWE-494 Download of Code Without Integrity Check weakness

Referenced by CAPEC · can precede (1)

  • CAPEC-159 Redirect Access to Libraries attack pattern

Referenced by CWE · attack pattern (1)

  • CWE-494 Download of Code Without Integrity Check weakness