S0519Network

S0519SYNful Knock

Platforms
1
ATT&CK
14.1
References
3

Description

[SYNful Knock](https://attack.mitre.org/software/S0519) is a stealthy modification of the operating system of network devices that can be used to maintain persistence within a victim's network and provide new capabilities to the adversary.(Citation: Mandiant - Synful Knock)(Citation: Cisco Synful Knock Evolution)

Platforms· 1

Network

References

  1. https://attack.mitre.org/software/S0519
  2. https://www.mandiant.com/resources/synful-knock-acis
  3. https://blogs.cisco.com/security/evolution-of-attacks-on-cisco-ios-devices

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Sub-technique
Network Device Authentication
Sub-technique
Network Device CLI
Sub-technique
Port Knocking
Technique
Server Software Component
Software
Anchor
Technique
Traffic Signaling
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.