MITRE ATT&CKtechnique

T1632 Subvert Trust Controls

Published 2022-03-30 Modified 2025-10-24 Official page ↗
Domain
mobile
Tactics
Defense Evasion
Platforms
Android, iOS
Version
1.1
Created
2022-03-30

Description

Adversaries may undermine security controls that will either warn users of untrusted activity or prevent execution of untrusted applications. Operating systems and security products may contain mechanisms to identify programs or websites as possessing some level of trust. Examples of such features include: an app being allowed to run because it is signed by a valid code signing certificate; an OS prompt alerting the user that an app came from an untrusted source; or getting an indication that you are about to connect to an untrusted site. The method adversaries use will depend on the specific mechanism they seek to subvert.

Related

Tactic · MITRE ATT&CK (1)

  • TA0030 Defense Evasion tactic

Referenced by MITRE ATT&CK · mitigates (3)

  • M1011 User Guidance mitigation
  • M1006 Use Recent OS Version mitigation
  • M1012 Enterprise Policy mitigation

Referenced by MITRE ATT&CK · subtechnique of (1)

  • T1632.001 Code Signing Policy Modification sub-technique

References