MITRE ATT&CKsoftware (malware)

S0603 Stuxnet

Published 2020-12-14 Modified 2026-04-24 Official page ↗
Domain
enterprise, ics
Platforms
Windows
Aliases
W32.Stuxnet
Version
1.5
Created
2020-12-14

Description

Stuxnet was the first publicly reported malware to specifically target industrial control systems devices. Stuxnet is a large and complex malware that utilized multiple behaviors, including numerous zero-day vulnerabilities, a sophisticated Windows rootkit, and network infection routines. Stuxnet was discovered in 2010, with some components being used as early as November 2008.

Related

Uses · MITRE ATT&CK (69)

  • T1701.002 Windows Command Shell sub-technique
  • T0873.001 Siemens Project File Format sub-technique
  • T1694.002 Hardcoded Credentials sub-technique
  • T1685 Disable or Modify Tools technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T0821 Modify Controller Tasking technique
  • T0834 Native API technique
  • T0888 Remote System Information Discovery technique
  • T0889 Modify Program technique
  • T0886 Remote Services technique
  • T0801 Monitor Process State technique
  • T0831 Manipulation of Control technique
  • T0832 Manipulation of View technique
  • T0835 Manipulate I/O Image technique
  • T0836 Modify Parameter technique
  • T0842 Network Sniffing technique
  • T0843 Program Download technique
  • T0847 Replication Through Removable Media technique
  • T0849 Masquerading technique
  • T0851 Rootkit technique
  • T0863 User Execution technique
  • T0866 Exploitation of Remote Services technique
  • T0867 Lateral Tool Transfer technique
  • T0869 Standard Application Layer Protocol technique
  • T0874 Hooking technique
  • T0877 I/O Image technique
  • T0885 Commonly Used Port technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1090.001 Internal Proxy sub-technique
Show all 69 ›

References