Technique
technique:supply_chain_attack
Attack technique in which compromise of a provider enables access to many downstream customers.
Compromise of devices or software between manufacture or distribution and delivery to customers.
“I would call this a supply chain attack.”
“Phones were somehow intercepted between where they were made and the customers”
Attack technique in which compromise of a provider enables access to many downstream customers.
“This is what’s called a supply chain attack”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | Sky fake-device operation | Derived | 105 |
| incoming | INVOLVES | Kaseya ransomware attack | Explicit | 126 |
Sky fake-device operation INVOLVES supply chain attack
Jack characterizes the suspected interception and compromise of devices before sale as a supply-chain attack.
Derived Confidence 96% · Jack Rhysider EP 105 Details
“I would call this a supply chain attack.”
Kaseya ransomware attack INVOLVES supply chain attack
The Kaseya incident was described as a major supply-chain incident because compromise of Kaseya reached downstream customers.
Explicit Confidence 99% · Will EP 126 Details
“The Kaseya, that was basically one of the biggest supply chain incidents since NotPetya.”