VATT&EK | Vehicle Threat Matrix

Skip to main content

Main navigation

Automotive
Rail
Resources

Fulltext search

Manipulate Environment

ATE-001: Downgrade Attacks via Rogue Base station

ATE-002: Rogue Cellular Base Station

ATE-003: Rogue Wi-Fi Access Points

ATE-004: GNSS Attacks

ATE-004.01: GNSS Spoofing Attacks

ATE-004.02: GNSS Jamming

ATE-005: Sybil Attack

ATE-006: Camera Attacks

ATE-006.01: General Attacks on Camera Systems

ATE-006.02: Camera Feature Attacks

ATE-006.03: Blinding the Camera

ATE-007: LiDAR Attacks

ATE-007.01: LiDAR Replay Attacks

ATE-007.02: LiDAR Relaying Attack

ATE-007.03: LiDAR Spoofing Attacks

ATE-007.04: LiDAR Jamming / Saturation Attack

ATE-008: Spoofing FMCW Radar

ATE-009: Black Hole Attacks

ATE-010: TPMS Attacks

ATE-010.01: TPMS Jamming

ATE-010.02: TPMS Spoofing

ATE-011: Attacks on Road Side Units/Balise

Initial Access

ATE-012: Radio Data System (RDS) Attacks

ATE-013: Malicious SMS

ATE-014: Exploitation of Wi-Fi Stack

ATE-015: Gain access to Wi-Fi Hotspot

ATE-016: Exploitation via Bluetooth

ATE-017: Exploitation via C-V2X

ATE-018: Exploitation via DSRC

ATE-019: Exploitation via Repair Shop/Garage/Factory

ATE-020: Exploitation of OBD Dongles

ATE-021: Hardware addition

ATE-021.01: Physical Access (CAN-Injection)

ATE-021.02: Connect device network via USB-Ethernet

ATE-021.03: Code Execution via USB

ATE-021.04: Code Execution via SD Card

ATE-021.05: Code Execution via CD

ATE-022: Exploitation via OBD Interface

ATE-023: Supply Chain Compromise

ATE-024: Unsecured Web APIs

ATE-025: Hacking in-vehicle apps

ATE-026: Malicious App Delivery

ATE-027: Drive-by Compromise

ATE-028: Exploitation via charging station

ATE-029: Keyless Go Attacks

ATE-029.01: Replay Attack

ATE-029.02: Relay Attack

ATE-029.03: Roll Jam Attack

ATE-029.04: Roll Back Attack

ATE-030: Service Compartment Access

ATE-031: Maintenance Notebook Infection

ATE-032: Exploitation of Internet Accessible Device

ATE-033: Remote Maintenance Accesspoint

ATE-079: Exfiltration via Removable Media

Execution

ATE-034: Command and Scripting Interpreter

ATE-035: Inter-process Communication: D-Bus

ATE-036: Native API

ATE-037: Scheduled Task/Job

ATE-038: User Execution

Persistence

ATE-039: Persistence via Credentials

ATE-040: Firmware Installation - Reprogram ECU

ATE-041: Modify OS Kernel, Boot / System Partition

ATE-042: Modify TEE

Privilege Escalation

ATE-043: Exploit Application Vulnerability

ATE-044: Exploit OS Vulnerability

ATE-045: Hardware Fault Injection

ATE-047: Reprogram ECU for privilege escalation

Defense Evasion

ATE-048: Bypass SecurityAccess

ATE-049: Bypass Code Signing Check

ATE-050: Firmware Installation - Reprogram ECU: Downgrade

ATE-051: Deactivate Immobilizer

ATE-052: Downgrade to insecure protocol

ATE-053: Enable Remote Functions

Credential Access

ATE-054: Adversary-in-the-Middle

ATE-055: Brute Force

ATE-056: Input Capture

ATE-057: SMS Message Capture

ATE-058: Network Sniffing

ATE-059: OS Credential Dumping

ATE-060: Unsecured Credentials

ATE-061: Exploit TEE Vulnerability

Discovery

ATE-062: ECU Discovery

ATE-063: ECU Service Discovery

ATE-064: Network Service Scanning

Lateral Movement

ATE-065: Exploitation of Remote Services

ATE-066: Remote Services

ATE-067: Replication Through Removable Media

ATE-068: Exploit ECU for Lateral Movement

ATE-069: Bridge Vehicle Networks

Collection

ATE-070: Gather information about ECU

ATE-071: Audio Capture

ATE-072: Screen Capture

ATE-073: Video Capture

Command and Control

ATE-074: C2 via SMS

ATE-075: C2 via Short Range Wireless Communication

ATE-076: C2 via Mid Range Wireless Communication

ATE-077: C2 via Wide Range Wireless Communication

Exfiltration

ATE-078: Exfiltration via Memory mapped Registers

ATE-080: Exfiltration via SMS

ATE-081: Exfiltration via C-V2X

ATE-082: Exfiltration via DSRC

Affect Vehicle Function

ATE-083: Control Horn

ATE-084: Control HVAC

ATE-085: Control Engine

ATE-086: Control Doors

ATE-087: Control Lights

ATE-088: Control Airbag

ATE-089: Control Windows

ATE-090: Speed control

ATE-091: Speed control via Radio

ATE-092: Send halt signal via Radio

ATE-093: Manipulate Passenger Information System

ATE-094: Control Instrument Panel Cluster (IPC)

ATE-095: Denial of Service

ATE-096: Message Injection

ATE-097: Control Brake

Impact

ATE-098: Denial of Control

ATE-099: Denial of View

ATE-100: Loss of Control

ATE-101: Enable premium features

ATE-102: Chip Tuning

ATE-103: Odometer fraud

ATE-104: Vehicle Theft

Home

Tactic_ID

ATA-006

Tactic_ID

ATA-005

Tactic_ID

ATA-004

Tactic_ID

ATA-003

Tactic_ID

ATA-002

Tactic_ID

ATA-001

Pagination

First page
Previous page
…
Page 7
Page 8
Page 9
Page 10
Page 11
Page 12
Page 13
Page 14
Current page 15

Powered By

Yekta IT GmbH Incyde GmbH

Information

Contact

Rechtliches

Privacy policy
Imprint