Wireless Compromise
Technique · ATTACK:ics:T0860
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:T0860",
"title": "Wireless Compromise",
"type": "Technique",
"source_url": "https://attack.mitre.org/techniques/T0860",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--2877063e-1851-48d2-bcc6-bc1d2733157e",
"external_id": "T0860",
"domain": "ics",
"created": "2020-05-21T17:43:26.506Z",
"modified": "2026-10-13T17:48:34.560Z",
"version": "1.2",
"aliases": [
],
"tactics": [
"initial-access"
],
"source_references": [
{
"source_name": "Alexander Bolshev March 2014",
"url": "https://www.slideshare.net/slideshow/17-bolshev-1-13/32178888"
},
{
"source_name": "Alexander Bolshev, Gleb Cherbov July 2014",
"url": "https://www.blackhat.com/docs/us-14/materials/us-14-Bolshev-ICSCorsair-How-I-Will-PWN-Your-ERP-Through-4-20mA-Current-Loop-WP.pdf"
},
{
"source_name": "Bruce Schneier January 2008",
"url": "https://www.schneier.com/blog/archives/2008/01/hacking_the_pol.html"
},
{
"source_name": "John Bill May 2017",
"url": "https://www.londonreconnections.com/2017/hacked-cyber-security-railways/"
},
{
"source_name": "Shelley Smith February 2008",
"url": "https://inhomelandsecurity.com/teen_hacker_in_poland_plays_tr/"
}
]
}Explicit source assertions (5)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:M0802 → mitigates → ATTACK:ics:T0860
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3ab912a4-70aa-45f8-b2ef-57113dde2cfa
CISA March 2010ATTACK:ics:M0813 → mitigates → ATTACK:ics:T0860
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3f335e8f-68da-4b06-9d96-f371ddaf23e6
ATTACK:ics:C0020 → uses → ATTACK:ics:T0860
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ae7ed6d8-65cc-45a0-82c3-c28e5630bf7c
Marshall Abrams July 2008ATTACK:ics:M0806 → mitigates → ATTACK:ics:T0860
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b2e10e48-8bd9-472a-9c6f-1d38650e8df1
DHS National Urban Security Technology Laboratory April 2019ATTACK:ics:M0808 → mitigates → ATTACK:ics:T0860
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b363cbbb-679c-47e0-8ad0-af98ebf51e60