ATT&CKProcedure examples

Procedure examples

Real-world descriptions of how a group, tool or campaign used a technique.

Technique: T1553.002×

53 examples

TechniqueUsed byProcedure example
T1553.002
Code Signing
ToolCSPY Downloader

CSPY Downloader has come signed with revoked certificates.

T1553.002
Code Signing
ToolQuasarRAT

A QuasarRAT .dll file is digitally signed by a certificate from AirVPN.

T1553.002
Code Signing
MalwareZeroCleare

ZeroCleare can deploy a vulnerable, signed driver on a compromised host to bypass operating system safeguards.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.