CAPEC-474Signature Spoofing by Key Theft

An attacker obtains an authoritative or reputable signer's private signature key by theft and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker. Metadata: detailed CAPEC pattern, status draft, likelihood medium, severity high. Underlying weakness: CWE-522. Mapped ATT&CK technique: [object Object]. Related CAPEC pattern: [object Object].