CAPECattack pattern

CAPEC-562 Modify Shared File

Official page ↗
Abstraction
Detailed
Status
Draft
CAPEC version
3.9

Description

An adversary manipulates the files in a shared location by adding malicious programs, scripts, or exploit code to valid content. Once a user opens the shared content, the tainted content is executed.

Mitigations

• Disallow shared content. Protect shared folders by minimizing users that have write access. Use utilities that mitigate exploitation like the Microsoft Enhanced Mitigation Experience Toolkit (EMET) to prevent exploits from being run.

Related

Att&ck technique · MITRE ATT&CK (1)

  • T1080 Taint Shared Content technique

Child of · CAPEC (1)

  • CAPEC-17 Using Malicious Files attack pattern

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

Referenced by CWE · attack pattern (1)

  • CWE-284 Improper Access Control weakness