H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Technique

Hardware Component Substitution

An attacker substitutes out a tested and approved hardware component for a maliciously-altered hardware component. This type of attack is carried out directly on the system, enabling the attacker to then cause disruption or additional compromise.

Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

An attacker substitutes out a tested and approved hardware component for a maliciously-altered hardware component. This type of attack is carried out directly on the system, enabling the attacker to then cause disruption or additional compromise.

Labels

attack-patterncapec
4 recorded

Relationships

child-of
to Malicious Hardware Update
Technique
child-of
from Malicious Gray Market Hardware
Technique
child-of
from Provide Counterfeit Component
Technique
mapped-to
to Compromise Hardware Supply Chain
Technique
1 external

References

capec
CAPEC-531
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance