| name | T1474.003_compromise-software-supply-chain |
| description | Adversaries may manipulate application software prior to receipt by a final consumer for the purpose of data or system compromise. |
| category | input-validation |
| version | 18.1 |
| author | cyberstrike-official |
| tags | ["mitre-attack","mobile","t1474.003","initial-access","android","ios","sub-technique"] |
| technique_id | T1474.003 |
| tactic | initial-access |
| all_tactics | ["initial-access"] |
| platforms | ["Android","iOS"] |
| mitre_url | https://attack.mitre.org/techniques/T1474/003 |
| tech_stack | ["android","ios"] |
| cwe_ids | ["CWE-20"] |
| chains_with | ["T1474","T1474.001","T1474.002"] |
| prerequisites | ["T1474"] |
| severity_boost | {"T1474":"Chain with T1474 for deeper attack path","T1474.001":"Chain with T1474.001 for deeper attack path","T1474.002":"Chain with T1474.002 for deeper attack path"} |
T1474.003 Compromise Software Supply Chain
Sub-technique of: T1474
High-Level Description
Adversaries may manipulate application software prior to receipt by a final consumer for the purpose of data or system compromise. Supply chain compromise of software can take place in a number of ways, including manipulation of the application source code, manipulation of the update/distribution mechanism for that software, or replacing compiled releases with a modified version.
Kill Chain Phase
Platforms: Android, iOS
What to Check
How to Test
Identify Attack Surface
Determine if the target mobile environment is susceptible to Compromise Software Supply Chain by examining the target platforms (Android, iOS).
Assess Existing Defenses
Review whether mitigations for T1474.003 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Remediation Guide
M1004 System Partition Integrity
Ensure Verified Boot is enabled on devices with that capability.
M1001 Security Updates
Security updates may contain patches that inhibit system software compromises.
Detection
Detection of Compromise Software Supply Chain
Risk Assessment
| Finding | Severity | Impact |
|---|
| Compromise Software Supply Chain technique applicable | Low | Initial Access |
CWE Categories
| CWE ID | Title |
|---|
| CWE-20 | Improper Input Validation |
References
