Engage Goals: EGO0003 Elicit
Engage Approach: EAP0001 Collect
Engage Actions: EAC0005 Lures, EAC0014 Software Manipulation
Name of Element: Fake Software Updates
Description of Element:
Goal: Gather information about attacker activity by offering deceptive software updates.
Approach: Luring attackers to download and execute fake updates.
Create fake software updates that appear legitimate but contain tracking mechanisms or deceptive payloads. When an attacker downloads and executes these updates, valuable information about their tools, techniques, and objectives can be gathered.
Technical Context:
These updates can be delivered through compromised websites, phishing emails, or even by manipulating legitimate update servers. This aligns with the MITRE ATT&CK technique T1588.002 (Software Update Hijacking).
Other:
Combine this with social engineering techniques to increase the likelihood of attackers falling for the deception.