CAPEC-558Replace Trusted Executable

An adversary exploits weaknesses in privilege management or access control to replace a trusted executable with a malicious version and enable the execution of malware when that trusted executable is called. Metadata: detailed CAPEC pattern, status stable, likelihood low, severity high. Underlying weakness: CWE-284. Mapped ATT&CK techniques: [object Object], [object Object]. Related CAPEC pattern: [object Object].