CAPEC Definitions

    CAPEC Definitions / CAPEC-552

    CAPEC-552: Install Rootkit

    An adversary exploits a weakness in authentication to install malware that alters the functionality and information provide by targeted operating system API calls. Often referred to as rootkits, it is often used to hide the presence of programs, files, network connections, services, drivers, and other system components.

    Severity:High
    Possibility:Medium

    Extended Description

    No Extended Description.

    Mitigations

    Prevent adversary access to privileged accounts necessary to install rootkits.

    Relationships with other CAPECs

    CAPEC-542: Targeted Malware

    Prerequisites

    No prerequisites found.

    Related Weaknesses

    CWE-284: Improper Access Control