MITRE ATT&CKsub-technique

T1195.003 Compromise Hardware Supply Chain

Published 2020-03-11 Modified 2025-10-24 Official page ↗
Domain
enterprise
Tactics
Initial Access
Platforms
Linux, macOS, Windows
Version
1.1
Created
2020-03-11

Description

Adversaries may manipulate hardware components in products prior to receipt by a final consumer for the purpose of data or system compromise. By modifying hardware or firmware in the supply chain, adversaries can insert a backdoor into consumer networks that may be difficult to detect and give the adversary a high degree of control over the system. Hardware backdoors may be inserted into various devices, such as servers, workstations, network infrastructure, or peripherals.

Related

Subtechnique of · MITRE ATT&CK (1)

  • T1195 Supply Chain Compromise technique

Tactic · MITRE ATT&CK (1)

  • TA0001 Initial Access tactic

Referenced by MITRE ATT&CK · mitigates (1)

  • M1046 Boot Integrity mitigation

Referenced by CAPEC · att&ck technique (12)

  • CAPEC-440 Hardware Integrity Attack attack pattern
  • CAPEC-443 Malicious Logic Inserted Into Product by Authorized Developer attack pattern
  • CAPEC-516 Hardware Component Substitution During Baselining attack pattern
  • CAPEC-520 Counterfeit Hardware Component Inserted During Product Assembly attack pattern
  • CAPEC-522 Malicious Hardware Component Replacement attack pattern
  • CAPEC-531 Hardware Component Substitution attack pattern
  • CAPEC-537 Infiltration of Hardware Development Environment attack pattern
  • CAPEC-539 ASIC With Malicious Functionality attack pattern
  • CAPEC-671 Requirements for ASIC Functionality Maliciously Altered attack pattern
  • CAPEC-672 Malicious Code Implanted During Chip Programming attack pattern
  • CAPEC-674 Design for FPGA Maliciously Altered attack pattern
  • CAPEC-677 Server Motherboard Compromise attack pattern

Referenced by Compliance · mitigates (14)

  • NIST-CM-2 Baseline Configuration NIST 800-53 control
  • NIST-CM-3 Configuration Change Control NIST 800-53 control
  • NIST-CM-5 Access Restrictions for Change NIST 800-53 control
  • NIST-CM-8 System Component Inventory NIST 800-53 control
  • NIST-IA-7 Cryptographic Module Authentication NIST 800-53 control
  • NIST-RA-9 Criticality Analysis NIST 800-53 control
  • NIST-SA-10 Developer Configuration Management NIST 800-53 control
  • NIST-SA-11 Developer Testing and Evaluation NIST 800-53 control
  • NIST-SC-34 Non-modifiable Executable Programs NIST 800-53 control
  • NIST-SI-2 Flaw Remediation NIST 800-53 control
  • NIST-SI-7 Software, Firmware, and Information Integrity NIST 800-53 control
  • NIST-SR-11 Component Authenticity NIST 800-53 control
  • NIST-SR-4 Provenance NIST 800-53 control
  • NIST-SR-5 Acquisition Strategies, Tools, and Methods NIST 800-53 control