Change Credential
Technique · ATTACK:ics:T0892
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:ics:T0892",
"title": "Change Credential",
"type": "Technique",
"source_url": "https://attack.mitre.org/techniques/T0892",
"snapshot": "ics-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--fab8fc7d-f27f-4fbb-9de6-44740aade05f",
"external_id": "T0892",
"domain": "ics",
"created": "2023-03-30T14:04:17.023Z",
"modified": "2026-10-13T17:48:45.931Z",
"version": "1.0",
"aliases": [
],
"tactics": [
"inhibit-response-function"
],
"source_references": [
{
"source_name": "German BAS Lockout Dec 2021",
"url": "https://www.darkreading.com/attacks-breaches/lights-out-cyberattacks-shut-down-building-automation-systems"
}
]
}Explicit source assertions (6)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:ics:C0063 → uses → ATTACK:ics:T0892
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1582107d-95dd-41ba-b2c0-72200b93a292
CERT PolskaATTACK:ics:C0066 → uses → ATTACK:ics:T0892
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2c479e7e-422c-4329-8fb9-4484e2fdbf9c
FBI Water and Wastewater · Dragos Water Under Attack · Tenable Minnesota Water Utilities · Forescout Water Systems AttackATTACK:ics:M0927 → mitigates → ATTACK:ics:T0892
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--53af6987-21bb-46fd-bf85-e3eeaa74de1a
CISA June 2013ATTACK:ics:M0953 → mitigates → ATTACK:ics:T0892
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a717ccc7-0fe6-4a83-951f-5a89037ed927
Department of Homeland Security October 2009ATTACK:ics:M0811 → mitigates → ATTACK:ics:T0892
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cb6d67c0-33ba-4c49-ae70-d0e4f0f68794
M. Rentschler and H. HeineATTACK:ics:G1027 → uses → ATTACK:ics:T0892
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f8578dec-7c78-4af3-b62f-4f305bd991bb
Tenable Minnesota Water Utilities