CAPEC 654 Credential Prompt Impersonation

Stable Detailed Medium Risk

Severity High

Description

An adversary, through a previously installed malicious application, impersonates a credential prompt in an attempt to steal a user's credentials.

Attack Execution Flow

Step 1

Explore

[Determine suitable tasks to exploit] Determine what tasks exist on the target system that may result in a user providing their credentials.
Determine what tasks prompt a user for their credentials.

Attack Techniques

Determine what tasks prompt a user for their credentials.

Step 2

Exploit

[Impersonate Task] Impersonate a legitimate task, either expected or unexpected, in an attempt to gain user credentials.
Prompt a user for their credentials, while making the user believe the credential request is legitimate.

Attack Techniques

Prompt a user for their credentials, while making the user believe the credential request is legitimate.

CAPEC 654 Credential Prompt Impersonation

Description

Attack Execution Flow

Step 1

Attack Techniques

Step 2

Attack Techniques

Mitigations

Consequences

Security Scopes Affected

Potential Impacts

Indicators

Relationships

Parent CAPECs

Related ATT&CK Techniques

Input Capture

Elevated Execution with Prompt

Resources Required

CAPEC 654 Credential Prompt Impersonation

Description

Attack Execution Flow

Step 1

Attack Techniques

Step 2

Attack Techniques

Mitigations

Consequences

Security Scopes Affected

Potential Impacts

Indicators

Relationships

Parent CAPECs

Related ATT&CK Techniques

Input Capture

Elevated Execution with Prompt

Resources Required

Iscriviti alla newsletter