CAPECattack pattern
CAPEC-616 Establish Rogue Location
Medium
Official page ↗
- Abstraction
- Standard
- Status
- Stable
- Likelihood of attack
- Medium
- Typical severity
- Medium
- CAPEC version
- 3.9
Description
An adversary provides a malicious version of a resource at a location that is similar to the expected location of a legitimate resource. After establishing the rogue location, the adversary waits for a victim to visit the location and access the malicious resource.
Prerequisites
• A resource is expected to available to the user.
Skills required
• [Low] Adversaries can often purchase low-cost technology to implement rogue access points.
Consequences
• Confidentiality, Integrity: Other
Related
Att&ck technique · MITRE ATT&CK (1)
- T1036.005 Match Legitimate Resource Name or Location sub-technique
Can precede · CAPEC (1)
- CAPEC-691 Spoof Open-Source Software Metadata attack pattern
Child of · CAPEC (1)
- CAPEC-154 Resource Location Spoofing attack pattern
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
Referenced by CAPEC · child of (9)
- CAPEC-505 Scheme Squatting attack pattern
- CAPEC-611 BitSquatting attack pattern
- CAPEC-615 Evil Twin Wi-Fi Attack attack pattern
- CAPEC-617 Cellular Rogue Base Station attack pattern
- CAPEC-630 TypoSquatting attack pattern
- CAPEC-631 SoundSquatting attack pattern
- CAPEC-632 Homograph Attack via Homoglyphs attack pattern
- CAPEC-667 Bluetooth Impersonation AttackS (BIAS) attack pattern
- CAPEC-695 Repo Jacking attack pattern
Referenced by CWE · attack pattern (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness