Technique
technique:supply_chain_compromise
Also: poisoning the supply chain, supply chain attack
Technique of compromising suppliers or third-party companies so malware or software can reach higher-value defense contractors.
Technique of compromising suppliers or third-party companies so malware or software can reach higher-value defense contractors.
“if they can infect the supply chain and that software gets into the defense company”
Compromise of a third-party service or externally hosted library so malicious code is delivered to dependent websites.
“You can be compromised through a supply chain”
“the hackers were getting this malicious JavaScript into these sites through the supply chain”
The inferred technique of compromising a software vendor’s update infrastructure to distribute malware to customers.
“they hijacked MeDoc’s update mechanism to push out their own malware.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Elderwood | Explicit | 19 |
| incoming | USES | Magecart | Explicit | 52 |
| incoming | INVOLVES | NotPetya | Derived | 54 |
Elderwood USES supply-chain compromise
Elderwood was described as compromising suppliers and third parties so malicious software could reach defense contractors through the supply chain.
Explicit Confidence 98% · Jack Rhysider EP 19 Details
“if they can infect the supply chain and that software gets into the defense company, then it’s just as good as hacking into the defense company”
Magecart USES supply-chain compromise
Magecart has used compromised third-party or supply-chain resources to place malicious JavaScript on websites.
Explicit Confidence 97% · Jack Rhysider EP 52 Details
“the hackers were getting this malicious JavaScript into these sites through the supply chain”
NotPetya INVOLVES supply-chain compromise
The incident used a supply-chain compromise involving the MeDoc software update mechanism.
Derived Confidence 96% · Andy Greenberg EP 54 Details
“they hijacked MeDoc’s update mechanism to push out their own malware”