CAPEC-89: Pharming

ID CAPEC-89
Typical Severity Very High
Likelihood Of Attack High
Status Draft

A pharming attack occurs when the victim is fooled into entering sensitive data into supposedly trusted locations, such as an online bank site or a trading platform. An attacker can impersonate these supposedly trusted sites and have the victim be directed to their site rather than the originally intended one. Pharming does not require script injection or clicking on malicious links for the attack to succeed.

https://capec.mitre.org/data/definitions/89.html

Weaknesses

# ID Name Type
CWE-346 Origin Validation Error weakness
CWE-350 Reliance on Reverse DNS Resolution for a Security-Critical Action weakness
Loading...