Poisoned Pipeline

Poisoned Pipeline / Techniques / T0136

T0136 · Initial Access · TA03 · observed in 36 incident(s)

Brandjacking

Container Security Open Source Security

Brandjacking is a type of attack where an attacker impersonates a legitimate brand or project in an attempt to trick users into downloading and installing a malicious container or package.
This can happen when an attacker creates a package or container with a similar name or logo to a well-known and trusted brand or project, and then distributes it through public repositories.
Brandjacking can be particularly dangerous in the context of container and open source security, as many developers and users rely on public repositories and may not take the time to thoroughly verify the authenticity of packages they download.
Once a malicious package is installed, it can be difficult to detect and can lead to serious security breaches.

Where this idea came from

Security article

Cited from a security article or vendor blog in the original YAML; not a first-party incident report.

Mitigations

Detections

Observed in incidents (36)

References