MITRE ATT&CKtechnique
T1626 Abuse Elevation Control Mechanism
- Domain
- mobile
- Tactics
- Privilege Escalation
- Platforms
- Android
- Version
- 1.1
- Created
- 2022-04-01
Description
Adversaries may circumvent mechanisms designed to control elevated privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can gain on a machine. Authorization has to be granted to specific users in order to perform tasks that are designated as higher risk. An adversary can use several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Related
Tactic · MITRE ATT&CK (1)
- TA0029 Privilege Escalation tactic
Referenced by MITRE ATT&CK · mitigates (1)
- M1013 Application Developer Guidance mitigation
Referenced by MITRE ATT&CK · subtechnique of (1)
- T1626.001 Device Administrator Permissions sub-technique
References
- https://pages.nist.gov/mobile-threat-catalogue/application-threats/APP-22.html NIST Mobile Threat Catalogue