ATT&CK · T1120
Peripheral Device Discovery
Tactics: discovery
About
Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system. Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Platforms: Linux, macOS, WindowsMITRE ATT&CK ↗
Used by actors
9 known groups
Software
47 malware/tools implement this
PlugXADVSTORESHELLDustySkyBlackEnergyT9000PrikormkaCrimsonBADNEWSUSBStealerRTMMoonWindBandookZebrocyjRATWannaCryFlawedAmmyynjRATMacheteAttorUSBferryCadelspyRamsayTajMahalRagnar LockerCrutchStuxnetWastedLockerObliqueRATTurianQakBotDarkWatchmanFerociousQuietSieveMongallHeyoka BackdoorFunnyDreamSVCReadySharpDiscoNightClubINC RansomwareCHIMNEYSWEEPROADSWEEPAcidPourLockBit 2.0LockBit 3.0HIUPANDynoWiper
Corpus indicators tagged with this technique
0 indicators in the corpus carry T1120.
No corpus indicators are tagged with this technique yet.