Malicious Software Download
Attack Pattern ID: 185 (Meta Attack Pattern Completeness: Complete)Typical Severity: Very HighStatus: Draft
+ Description

Summary

An attacker uses deceptive methods to cause a user or an automated process to download and install dangerous code that originates from an attacker controlled source. There are several variations to this strategy of attack.

+ Related Weaknesses
CWE-IDWeakness NameWeakness Relationship Type
494Download of Code Without Integrity CheckTargeted
+ Related Attack Patterns
NatureTypeIDNameDescriptionView(s) this relationship pertains toView\(s\)
ChildOfAttack PatternAttack Pattern184Software Integrity Attacks 
Mechanism of Attack (primary)1000
ParentOfAttack PatternAttack Pattern186Malicious Software Update 
Mechanism of Attack1000
Back to top