MITRE ATT&CKtechnique

T0806 Brute Force I/O

Published 2020-05-21 Modified 2026-10-13 Official page ↗
Domain
ics
Tactics
Impair Process Control
Platforms
Embedded, Windows, Linux
Version
1.1
Created
2020-05-21

Description

Adversaries may repetitively or successively change I/O point values to perform an action. Brute Force I/O may be achieved by changing either a range of I/O point values or a single point value repeatedly to manipulate a process function. The adversary's goal and the information they have about the target environment will influence which of the options they choose. In the case of brute forcing a range of point values, the adversary may be able to achieve an impact without targeting a specific point. In the case where a single point is targeted, the adversary may be able to generate instability on the process function associated with that particular point. Adversaries may use Brute Force I/O to cause failures within various industrial processes. These failures could be the result of wear on equipment or damage to downstream equipment.

Related

Tactic · MITRE ATT&CK (1)

  • TA0106 Impair Process Control tactic

Referenced by MITRE ATT&CK · mitigates (4)

  • M0937 Filter Network Traffic mitigation
  • M0807 Network Allowlists mitigation
  • M0930 Network Segmentation mitigation
  • M0813 Software Process and Device Authentication mitigation

Referenced by MITRE ATT&CK · uses (3)

  • S1157 Fuxnet software (malware)
  • S1072 Industroyer2 software (malware)
  • S0604 Industroyer software (malware)