{'xhtml:p': 'An adversary exploits security vulnerabilities or inherent functionalities of a web browser, in order to manipulate traffic between two endpoints.'}
Description
Attack Execution Flow
3
1
Step 1
ExperimentThe adversary tricks the victim into installing the Trojan Horse malware onto their system.
Conduct phishing attacks, drive-by malware installations, or masquerade malicious browser extensions as being legitimate.
AI Translation
L'attore malevolo inganna la vittima inducendola a installare il malware Trojan Horse sul proprio sistema.
Esegue attacchi di phishing, installazioni di malware drive-by o maschera estensioni browser dannose come legittime.
Attack Techniques
-
Conduct phishing attacks, drive-by malware installations, or masquerade malicious browser extensions as being legitimate.
2
Step 2
ExperimentThe adversary inserts themself into the communication channel initially acting as a routing proxy between the two targeted components.
AI Translation
L'avversario si inserisce nel canale di comunicazione inizialmente agendo come proxy di routing tra i due componenti mirati.
3
Step 3
ExploitThe adversary observes, filters, or alters passed data of their choosing to gain access to sensitive information or to manipulate the actions of the two target components for their own purposes.
AI Translation
L'avversario osserva, filtra o altera i dati trasmessi a suo piacimento per ottenere accesso a informazioni sensibili o per manipolare le azioni dei due componenti target a proprio vantaggio.
Mitigations
5
Use Strong, Out-Of-Band Mutual Authentication To Always Fully Authenticate Both Ends Of Any Communications Channel.
Ensure Browser Sessions Are Regularly Terminated And When Their Effective Lifetime Ends.
Limit User Permissions To Prevent Browser Pivoting.
Ensure Software And Applications Are Only Downloaded From Legitimate And Reputable Sources, In Addition To Conducting Integrity Checks On The Downloaded Component.
Leverage Anti-Malware Tools, Which Can Detect Trojan Horse Malware.
Consequences
Security Scopes Affected
Access Control
Authorization
Confidentiality
Integrity
Potential Impacts
Gain Privileges
Modify Data
Read Data
Relationships
Parent CAPECs
Related ATT&CK Techniques
1
T1185
Browser Session Hijacking
Adversaries may take advantage of security vulnerabilities and inherent functionality in browser software to change content, modify user-behaviors, and intercept …