Umbra Wiki attack-pattern attack-pattern/CAPEC-623
Back to wiki

CAPEC-623 — Compromising Emanations Attack

provenance: imported · CWE: CWE-201

CAPEC-623: Compromising Emanations Attack

MITRE CAPEC attack pattern

Status Draft
Typical severity Low
Likelihood of attack
Catalogue CAPEC 3.9 (2023-01-24)

Description

Compromising Emanations (CE) are defined as unintentional signals which an attacker may intercept and analyze to disclose the information processed by the targeted equipment. Commercial mobile devices and retransmission devices have displays, buttons, microchips, and radios that emit mechanical emissions in the form of sound or vibrations. Capturing these emissions can help an adversary understand what the device is doing.

Where this sits in the chain

A finding maps to a weakness (CWE), a weakness is exploited by an attack pattern (CAPEC), and an attack pattern shows up in ATT&CK as observed adversary behaviour. This page is the middle hop.

Weaknesses exploited: CWE-201

Prerequisites

  • Proximal access to the device.

Skills required

  • High: Sophisticated attack.

Consequences

  • Confidentiality: Read Data

Mitigations

  • None are known.

Source