COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-387

Navigation Remapping To Propagate Malicious Content

An adversary manipulates either egress or ingress data from a client within an application framework in order to change the content of messages and thereby circumvent the expected application logic.

Soyutlama

Detailed

Tipik ciddiyet

Medium

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

An adversary manipulates either egress or ingress data from a client within an application framework in order to change the content of messages and thereby circumvent the expected application logic.

Genişletilmiş açıklama

Performing this attack allows the adversary to manipulate content in such a way as to produce messages or content that look authentic but may contain deceptive links, spam-like content, or links to the adversarys' code. In general, content-spoofing within an application API can be employed to stage many different types of attacks varied based on the adversarys' intent. When the goal is to spread malware, deceptive content is created such as modified links, buttons, or images, that entice users to click on those items, all of which point to a malicious URI. The techniques require use of specialized software that allow the adversary to use adversary-in-the-middle ( CAPEC-94 ) communications between the web browser and the remote system in order to change the destination of various application interface elements.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • Targeted software is utilizing application framework APIs

Gerekli beceri

MITRE kaydında belirtilmemiş.

Gerekli kaynak

  • A software program that allows the use of adversary-in-the-middle communications between the client and server, such as a man-in-the-middle proxy.
CAPEC-387: Navigation Remapping To Propagate Malicious Content — DayBreach Saldırı Sözlüğü · DayBreach