CAPECattack pattern
CAPEC-562 Modify Shared File
- Abstraction
- Detailed
- Status
- Draft
- CAPEC version
- 3.9
Description
An adversary manipulates the files in a shared location by adding malicious programs, scripts, or exploit code to valid content. Once a user opens the shared content, the tainted content is executed.
Mitigations
• Disallow shared content. Protect shared folders by minimizing users that have write access. Use utilities that mitigate exploitation like the Microsoft Enhanced Mitigation Experience Toolkit (EMET) to prevent exploits from being run.
Related
Att&ck technique · MITRE ATT&CK (1)
- T1080 Taint Shared Content technique
Child of · CAPEC (1)
- CAPEC-17 Using Malicious Files attack pattern
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
Referenced by CWE · attack pattern (1)
- CWE-284 Improper Access Control weakness