Adversaries may transfer tools or other files from one system to another to stage adversary tools or other files over the course of an operation. (Citation: Enterprise ATT&CK) Copying of files may also be performed laterally between internal victim systems to support Lateral Movement with remote Execution using inherent file sharing protocols such as file sharing over SMB to connected network shares. (Citation: Enterprise ATT&CK) In control systems environments, malware may use SMB and other file sharing protocols to move laterally through industrial networks.

Linked Issues

Issuelinks
Linktype Issue
is related to Techniques
is related to Application Server
is related to Virtual Private Network (VPN) Server
is related to Control Server
is related to Field I/O
is related to Jump Host
is related to Workstation
is blocked by Detection of Lateral Tool Transfer
is blocked by Network Intrusion Prevention
Impressum German English