CAPEC Definitions
CAPEC Definitions / CAPEC-552
CAPEC-552: Install Rootkit
An adversary exploits a weakness in authentication to install malware that alters the functionality and information provide by targeted operating system API calls. Often referred to as rootkits, it is often used to hide the presence of programs, files, network connections, services, drivers, and other system components.
Severity:High
Possibility:Medium
Extended Description
No Extended Description.
Mitigations
Prevent adversary access to privileged accounts necessary to install rootkits.
Relationships with other CAPECs
CAPEC-542: Targeted Malware
Prerequisites
No prerequisites found.
Related Weaknesses
CWE-284: Improper Access Control
