Compliance Node Overview
MITRE ATT&CK T1674 (Input Injection) is an Enterprise Execution technique. Adversaries may simulate keystrokes on a victim’s computer by various means to perform any type of action on behalf of the user, such as launching the command interpreter using keyboard shortcuts, typing an inline script to be executed, or interacting directly with a GUI-based application. These actions can be preprogrammed into adversary tooling or executed through physical devices such as Human Interface Devices (HIDs). For example, adversaries have used tooling that monitors the Windows message loop to detect when a user visits bank-specific URLs. If detected, the tool then simulates keystrokes to open the developer console or select the address bar, pastes malicious JavaScript from the clipboard, and executes it - enabling manipulation of content within the browser, such as replacing b... Affected platforms: Windows, macOS, Linux. ATT&CK-mapped mitigations: M1034 Limit Hardware Installation, M1038 Execution Prevention.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1674/
SHA-256 integrity: 35bd5b1632bc36481a6cdb837cc785dc58c817b91e74c6e1830218d624d34a3f
Primary Citations — 6 traced to source
- MITRE ATT&CK Technique T1674: Input Injection (https://attack.mitre.org/techniques/T1674/)
- MITRE ATT&CK Tactic TA0002: Execution (https://attack.mitre.org/tactics/TA0002/)
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access