COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-610

Cellular Data Injection

Adversaries inject data into mobile technology traffic (data flows or signaling data) to disrupt communications or conduct additional surveillance operations.

Abstraction

Standard

Typical severity

High

Likelihood of attack

Medium

Understand the attack

What is this attack pattern?

Adversaries inject data into mobile technology traffic (data flows or signaling data) to disrupt communications or conduct additional surveillance operations.

Requirements

What does the attack require?

Prerequisites

  • None

Skills required

  • High: Often achieved by nation states in conjunction with commercial cellular providers to conduct cellular traffic intercept and possible traffic injection.

Resources required

Not stated in the MITRE record.

Impact

What does a successful attack lead to?

Resource Consumption

Affected scopes: Availability

Modify Data

Affected scopes: Availability

Defence

How is it prevented and mitigated?

1
Commercial defensive technology to detect and alert to any attempts to modify mobile technology data flows or to inject new data into existing data flows and signaling data.
CAPEC-610: Cellular Data Injection — DayBreach Saldırı Sözlüğü · DayBreach