Skip to content
attack.paths
Sign in
← LibraryTechnique entry
APT-SUPPLIER-UPDATERInitial Access

Trusted Updater Hijack (NotPetya / M.E.Doc)

Compromise a niche software vendor's update server — every customer pulls the malicious update, mass-spread inside trusted networks.

§ Where this technique fits

APT-SUPPLIER-UPDATER is catalogued under the Initial Access tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 2 on average.

§ Dossiers chaining this technique

§ What commonly comes next

  1. 01
    Supply Chain Compromise
    T1195 · Initial Access
    seen 1×