mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
Ryan Xu
009ae77217
* E/f updates (#143) * E/F Update, Update Install Cert ID * Small fixes * Update common objects link (#142) * Update README.md * Update 09152023.md * Update README.md * Update 12182023.md * Adding descriptions to micro-behaviors * Fixing dead links * V3.1 updates (#144) * minor fixes for v3.1 * correct id --------- Co-authored-by: Desiree Beck <dbeck@mitre.org>
1.5 KiB
1.5 KiB
| ID | E1190 |
| Objective(s) | Impact |
| Related ATT&CK Techniques | Exploit Public-Facing Application (T1190) |
| Impact Type | Breach |
| Version | 2.0 |
| Created | 1 August 2019 |
| Last Modified | 1 March 2023 |
Exploit Kit
An exploit kit is a software system designed to exploit known vulnerabilities. Exploit kits typically include pre-written exploit code for known vulnerabilities and mechanisms to deliver the payload, such as malware, ransomware, or spyware, onto the victim's system. These kits are typically used by cybercriminals and are often sold on the dark web. They automate the exploitation process, making it easier for individuals with limited technical skills to launch attacks.
See related ATT&CK Technique: Exploit Public-Facing Application (T1190), which relates to Initial Access. Under the Impact objective, exploit behaviors are considered more broadly in MBC.
Use in Malware
| Name | Date | Method | Description |
|---|---|---|---|
| Ursnif | 2016 | -- | Ursnif is sometimes delivered via exploit kit. [1] |
References
[1] https://www.cyber.nj.gov/threat-profiles/trojan-variants/ursnif