MITRE ATT&CKsub-technique
T1474.002 Compromise Hardware Supply Chain
- Domain
- mobile
- Tactics
- Initial Access
- Platforms
- Android, iOS
- Version
- 1.1
- Created
- 2022-03-28
Description
Adversaries may manipulate hardware components in products prior to receipt by a final consumer for the purpose of data or system compromise. By modifying hardware or firmware in the supply chain, adversaries can insert a backdoor into consumer networks that may be difficult to detect and give the adversary a high degree of control over the system.
Related
Subtechnique of · MITRE ATT&CK (1)
- T1474 Supply Chain Compromise technique
Tactic · MITRE ATT&CK (1)
- TA0027 Initial Access tactic
Referenced by MITRE ATT&CK · mitigates (1)
- M1001 Security Updates mitigation
References
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-1.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-2.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-4.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-5.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-6.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-7.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-8.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-13.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-16.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-17.html NIST Mobile Threat Catalogue
- https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-21.html NIST Mobile Threat Catalogue