Detailedlikelihood: Mediumseverity: MediumDraft
CAPEC-648Collect Data from Screen Capture
Abstraction
Detailed
Status
Draft
Likelihood
Medium
Severity
Medium
Description
An adversary gathers sensitive information by exploiting the system's screen capture functionality. Through screenshots, the adversary aims to see what happens on the screen over the course of an operation. The adversary can leverage information gathered in order to carry out further attacks.
Metadata: detailed CAPEC pattern, status draft, likelihood medium, severity medium. Underlying weakness: CWE-267. Mapped ATT&CK techniques: [object Object], [object Object]. Related CAPEC pattern: [object Object].
Related weaknesses· 1
MITRE ATT&CK crosswalk· 2
Related attack patterns· 1
Exploits1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Privilege Defined With Unsafe Actionscwe-267 | 100% | live |
Related to2
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Technique | Screen Capturet1113 | 100% | live |
| Technique | t1513 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.