H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Technique

Malicious Software Update

An adversary uses deceptive methods to cause a user or an automated process to download and install dangerous code believed to be a valid update that originates from an adversary controlled source.

Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

An adversary uses deceptive methods to cause a user or an automated process to download and install dangerous code believed to be a valid update that originates from an adversary controlled source.

Labels

attack-patterncapec
10 recorded

Relationships

child-of
from Malicious Automated Software Update via Redirection
Technique
child-of
from Malicious Automated Software Update via Spoofing
Technique
child-of
from Malicious Manual Software Update
Technique
child-of
to Software Integrity Attack
Technique
child-of
from Rooting SIM Cards
Technique
mapped-to
to Compromise Software Supply Chain
Technique
related-to
from CVE-2021-44168
Vulnerability
related-to
from CVE-2022-40799
Vulnerability
related-to
from CVE-2025-15556
Vulnerability
related-to
from CVE-2026-3502
Vulnerability
1 external

References

capec
CAPEC-186
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance