Threat intelligence / Technique

Development Alteration

An adversary modifies a technology, product, or component during its development to acheive a negative impact once the system is deployed. The goal of the adversary is to modify the system in such a way that the negative impact can be leveraged when the system is later deployed. Development alteration attacks may include attacks that insert malicious logic into the system's software, modify or replace hardware components, and other attacks which negatively impact the system during development. These attacks generally require insider access to modify source code or to tamper with hardware components. The product is then delivered to the user where the negative impact can be leveraged at a later time.

Technique

TypeTechnique

External ID—

First seen2026-10-17

Last seen2026-10-17

Confidence

—

An adversary modifies a technology, product, or component during its development to acheive a negative impact once the system is deployed. The goal of the adversary is to modify the system in such a way that the negative impact can be leveraged when the system is later deployed. Development alteration attacks may include attacks that insert malicious logic into the system's software, modify or replace hardware components, and other attacks which negatively impact the system during development. These attacks generally require insider access to modify source code or to tamper with hardware components. The product is then delivered to the user where the negative impact can be leveraged at a later time.

Labels

attack-patterncapec

16 recorded

Relationships

child-of

from Altered Installed BIOS

Technique

child-of

from ASIC With Malicious Functionality

Technique

child-of

from Counterfeit Hardware Component Inserted During Product Assembly

Technique

child-of

from Developer Signing Maliciously Altered Software

Technique

child-of

to Modification During Manufacture

Technique

child-of

from Hardware Component Substitution During Baselining

Technique

child-of

from Infiltration of Hardware Development Environment

Technique

child-of

from Infiltration of Software Development Environment

Technique

child-of

from Malicious Code Implanted During Chip Programming

Technique

child-of

from Malicious Logic Inserted Into Product by Authorized Developer

Technique

child-of

from Malicious Logic Insertion into Product Software via Configuration Management Manipulation

Technique

child-of

from Malicious Logic Insertion into Product via Inclusion of Third-Party Component

Technique

child-of

from Open-Source Library Manipulation

Technique

child-of

from Signing Malicious Code

Technique

child-of

from Software Development Tools Maliciously Altered

Technique

child-of

from System Build Data Maliciously Altered

Technique

1 external

References

capec

CAPEC-444