Supply Chain Compromise: Compromise Hardware Supply Chain (T1195.003)

Tactic: Initial Access · Platforms: Linux, macOS, Windows

The interactive view maps 1 detection strategy, 1 mitigation to this technique, alongside D3FEND countermeasures and data-component coverage.

Sub-technique of Supply Chain Compromise (T1195).

Overview

Adversaries may manipulate hardware components in products prior to receipt by a final consumer for the purpose of data or system compromise. By modifying hardware or firmware in the supply chain, adversaries can insert a backdoor into consumer networks that may be difficult to detect and give the adversary a high degree of control over the system. Hardware backdoors may be inserted into various devices, such as servers, workstations, network infrastructure, or peripherals.

Explore

• Open T1195.003 in the interactive ATT&CK matrix
• ATT&CK Intelligence View guide
• Official MITRE ATT&CK entry for T1195.003
• Sigma detection rules for MITRE ATT&CK
• Built by Shahrukh Khan