MITRE ATT&CKtechnique

T0845 Program Upload

Published 2020-05-21 Modified 2026-10-13 Official page ↗
Domain
ics
Tactics
Collection
Platforms
Embedded
Version
1.0
Created
2020-05-21

Description

Adversaries may attempt to upload a program from a PLC to gather information about an industrial process. Uploading a program may allow them to acquire and study the underlying logic. Methods of program upload include vendor software, which enables the user to upload and read a program running on a PLC. This software can be used to upload the target program to a workstation, jump box, or an interfacing device.

Related

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · mitigates (8)

  • M0800 Authorization Enforcement mitigation
  • M0801 Access Management mitigation
  • M0802 Communication Authenticity mitigation
  • M0804 Human User Authentication mitigation
  • M0937 Filter Network Traffic mitigation
  • M0807 Network Allowlists mitigation
  • M0930 Network Segmentation mitigation
  • M0813 Software Process and Device Authentication mitigation

Referenced by MITRE ATT&CK · uses (3)

  • G1027 CyberAv3ngers group
  • S1045 INCONTROLLER software (malware)
  • S1009 Triton software (malware)