CAPEC-634
Probe Audio and Video Peripherals
2018-07-31
00h00 +00:00
00h00 +00:00
Cảnh báo cho một CAPEC
Luôn được thông báo về mọi thay đổi đối với một CAPEC cụ thể.
Mô tả CAPEC
The adversary exploits the target system's audio and video functionalities through malware or scheduled tasks. The goal is to capture sensitive information about the target for financial, personal, political, or other gains which is accomplished by collecting communication data between two parties via the use of peripheral devices (e.g. microphones and webcams) or applications with audio and video capabilities (e.g. Skype) on a system.
Thông tin CAPEC
Điều kiện tiên quyết
Knowledge of the target device's or application’s vulnerabilities that can be capitalized on with malicious code. The adversary must be able to place the malicious code on the target device.Kỹ năng cần thiết
To deploy a hidden process or malware on the system to automatically collect audio and video data.Các biện pháp giảm thiểu
Prevent unknown code from executing on a system through the use of an allowlist policy.Patch installed applications as soon as new updates become available.
Điểm yếu liên quan
| Tên điểm yếu | |
|---|---|
CWE-267 |
Privilege Defined With Unsafe Actions A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity. |
Tài liệu tham khảo
REF-653
What is Car Whisperer?Amrita Mitra.
https://www.thesecuritybuddy.com/bluetooth-security/what-is-car-whisperer/
REF-654
What is Bluesnarfing?https://www.finjanmobile.com/what-is-bluesnarfing/
Gửi
| Tên | Tổ chức | Ngày | Ngày phát hành |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
Sửa đổi
| Tên | Tổ chức | Ngày | Bình luận |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Mitigations, Related_Attack_Patterns | |
| CAPEC Content Team | The MITRE Corporation | Updated Example_Instances, References |
