Detailedlikelihood: Mediumseverity: HighDraft
CAPEC-552Install Rootkit
Abstraction
Detailed
Status
Draft
Likelihood
Medium
Severity
High
Description
An adversary exploits a weakness in authentication to install malware that alters the functionality and information provide by targeted operating system API calls. Often referred to as rootkits, it is often used to hide the presence of programs, files, network connections, services, drivers, and other system components.
Related weaknesses· 1
MITRE ATT&CK crosswalk· 3
Related attack patterns· 1
Exploits1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Improper Access Controlcwe-284 | 100% | live |
Related to3
| Type | Target | Confidence | Tier |
|---|---|---|---|
| SubTechnique | Kernel Modules and Extensionst1547.006 | 100% | live |
| SubTechnique | Bootkitt1542.003 | 100% | live |
| Technique | Rootkitt1014 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.