CAPECattack pattern
CAPEC-655 Avoid Security Tool Identification by Adding Data
High
Official page ↗
- Abstraction
- Detailed
- Status
- Draft
- Likelihood of attack
- High
- Typical severity
- High
- CAPEC version
- 3.9
Description
An adversary adds data to a file to increase the file size beyond what security tools are capable of handling in an attempt to mask their actions.
In addition to this, adding data to a file also changes the file's hash, frustrating security tools that look for known bad files by their hash.
Consequences
• Accountability: Hide Activities, Bypass Protection Mechanism
• Integrity: Modify Data
Related
Att&ck technique · MITRE ATT&CK (1)
- T1027.001 Binary Padding sub-technique
Child of · CAPEC (1)
- CAPEC-572 Artificially Inflate File Sizes attack pattern