CAPECattack pattern
CAPEC-473 Signature Spoof
- Abstraction
- Standard
- Status
- Draft
- CAPEC version
- 3.9
Description
An attacker generates a message or datablock that causes the recipient to believe that the message or datablock was generated and cryptographically signed by an authoritative or reputable source, misleading a victim or victim operating system into performing malicious actions.
Prerequisites
• The victim or victim system is dependent upon a cryptographic signature-based verification system for validation of one or more security events or actions.
• The validation can be bypassed via an attacker-provided signature that makes it appear that the legitimate authoritative or reputable source provided the signature.
Skills required
• [High] Technical understanding of how signature verification algorithms work with data and applications
Consequences
• Access Control, Authentication: Gain Privileges
Related
Att&ck technique · MITRE ATT&CK (2)
Child of · CAPEC (1)
- CAPEC-151 Identity Spoofing attack pattern
Weakness · CWE (3)
Referenced by CAPEC · child of (7)
- CAPEC-459 Creating a Rogue Certification Authority Certificate attack pattern
- CAPEC-474 Signature Spoofing by Key Theft attack pattern
- CAPEC-475 Signature Spoofing by Improper Validation attack pattern
- CAPEC-476 Signature Spoofing by Misrepresentation attack pattern
- CAPEC-477 Signature Spoofing by Mixing Signed and Unsigned Content attack pattern
- CAPEC-479 Malicious Root Certificate attack pattern
- CAPEC-485 Signature Spoofing by Key Recreation attack pattern