Misbehaviour LossOfAstuteness

URI: LossOfAstuteness

Package: Users

Description: Being undermined in a way that causes a lapse in judgement regarding security risks in a Human, leaving them more open to being deceived into taking inappropriate actions.

This misbehaviour affects the trustworthiness attribute Astuteness

Human

An individual user role within the socio-technical system that uses and/or manages assets.

(empty)

D.C.HuiPiDCHS.3

Data Data entered via Process leaks by shoulder surfing Human in space Space: if Human is not careful, someone with access to space Space could shoulder surf a session during which Human enters Data via the user interface of Process on host device Host.

D.C.HuiRACHSPiD.3

Data Data entered via Process leaks by shoulder surfing Human in space Space: if Human is not careful, someone with access to space Space could shoulder surf a session in which Human enters Data via the user interface of Process accessed from remote access client RemoteAccessClient on host device Host.

H.W.HuHWES.3

Malware infection at Host due to execution of viral email attachment at WebBrowser on Host: the user Human runs a malicious file sent as an email attachment via webmail service MUA, infecting their client device Host.

D.C.HuiPv-iDFCHS.3

Data Data sent from FlowsFrom to Process leaks by shoulder surfing Human in space Space: if Human is not careful, someone with access to space Space could shoulder surf a session during which Human views Data via the user interface of Process on host device Host.

D.C.HuiPv-iD-FCHS.3

Data Data displayed by Process leaks by shoulder surfing Human in space Space: if Human is not careful, someone with access to space Space could shoulder surf a session during which Human views Data via the user interface of Process on host device Host.

D.C.HuiRACv-iDFCHS.3

DF.Auth.HuWEDF.3

Phishing attack fools Human into loading malicious URL to WebBrowser: user Human viewing email in their mail client MUA clicks on a malicious link, sending it to their web browser WebBrowser.

DF.Auth.HuWESDF.3

Phishing attack fools Human feeding malicious URL to WebBrowser: user Human viewing email via webmail service MUA clicks on a malicious link, sending it to their web browser WebBrowser.

DF.Auth.HuWSMSDF.3

Smishing attack fools Human feeding malicious URL to WebBrowser: user Human clicks on a malicious link in a text message on their phone Host, sending it to their web browser WebBrowser.

Hu.U.HuirPvDF.3

User Human affected by accessing forged Data from FlowsFrom via Process: user Human interacts via Process with data Data sent from FlowsFrom, so if the incoming data contains malicious alterations, then Human may make decisions based on false information.

Hu.U.HuirPvDS.3

User Human affected by forged data Data read by process Process: if a locally stored copy of Data contains malicious alterations designed to deceive, and this is loaded by process Process and displayed to user Human, they may make decisions based on false information.

H.L.HuiHSt.1

Insider attack by employee of Employer abusing access to Host: user Human of device Host may be persuaded by an untrustworthy employer Employer to abuse their privileges on that device.

H.M.HumCHS-iP.3.2

Unauthorised console access to an admin account on host Host in Space: an attacker with physical access to device Host in location Space exploits lax password security by user Human to gain root privileges via the console.

H.M.HumHSt.1

Insider attack by employee HostManager of Employer abusing admin rights on Host: the manager HostManager of device Host may be persuaded by an untrustworthy employer Employer to abuse their rights and enable attacks involving Host.

H.W.HuHE.3

Malware infection at Host due to execution of viral attachment in email client MUA on Host: the user Human runs a malicious file sent as an email attachment via their email client MUA, infecting their client device Host.

P.L.HuHE2AC.3

Execution of malicious email attachment by MUA on Host in Space: the user Human runs a malicious file sent as an email attachment while the host device is located in Space, allowing the attacker to exploit the privileges using connections accessible to their email client MUA via Host from Space.

P.L.HuiPCHS-iP.3.2

Unauthorised console access to interactive process Process on device Host in Space: an attacker with physical access to device Host in location Space exploits lax password security by user Human to interact via the console with process Process.

P.L.HuiPCHS-iP.3.3

Unattended console access to interactive process Process on device host Host in Space: an attacker with physical access to device Host in location Space is able to access process Process via the console while the legitimate user is away from the desk.

P.L.HuiPSt.1

Insider attack by employee of Employer abusing their control of Process: the legitimate user Human of process Process may be persuaded by an untrustworthy employer Employer to abuse the privileges assigned to Process.

S.L.HuPSSt.1

Insider intrusion by employee of Employer into Space: user Human has physical access to the private space Space, and may be persuaded by an untrustworthy employer Employer to carry out malicious acts in that space.

CC.AuC.HuDFTCS.3

Unauthentic flow of data Data from FlowsFrom directs Client to a fake service impersonating Service: an attacker who provides malicious input to client Client via FlowsFrom (e.g. via phishing), can induce the client to access a fake version of service Service, a one-off deception that may allow subsequent impersonation of the client through capture of its password.

CC.AuC.HuDSTCS.3

Unauthentic stored input Data directs Client to a fake service impersonating Service: an attacker who provides malicious input to client Client by tampering with stored input Data, can induce the client to access a fake version of service Service, a one-off deception that may allow subsequent impersonation of the client through capture of its password.

CC.AuC.HuiHCCC-nS.3.3

Shoulder surfing password for Client at Service from Host in Space: if user Human enters a password to client Client to access service Service when the client is running on host Host in insecure space Space, then an attacker could obtain the password by shoulder surfing.

CC.AuC.HuiHrCCC-nS.3.3

Shoulder surfing password for Client at Service from Host in Space: if user Human enters a password to client Client to access service Service when accessing the client via remote access from host Host in insecure space Space, then an attacker could obtain the password by shoulder surfing.

CC.AuC.HumCCC-nS.3

Credential stuffing to find password used by Human to access Service from Client: this threat applies where a human user of client Client uses a weak password which can guessed or found by brute force attack and used by an attacker to access Service as the client.

CC.AX.HuCCC-nS.6.1.2

User Human of client Client forgot the password to authenticate with Service: the service Service requires that clients authenticate using a strong password, but the user Human cannot remember the password.

CC.L.CSCCHuSt.1

Malicious action by employee of Employer controlling Service affects Client: the user Human controling service Service may be persuaded by their employer Employer to make the service mishandle requests sent from Client.

CC.R.HuStCCCS.1

Malicious action by employee of Employer using Client to access Service: user Human of client process Client may be persuaded by their employer Employer to abuse the right of Client to access service Service.

P.L.HuHW2ACE.3

Execution of malicious email attachment at WebBrowser on Host in Space: user Human runs a malicious file sent as an email attachment via MUA, allowing the attacker to exploit the privileges of their browser WebBrowser on device Host using network connections it has from location Space.

H.M.HumCH.2.2

Console access to weakly protected admin account on stolen device Host: an attacker with possession of device Host exploits exploits lax password security by user Human to access an admin account via the console.

P.L.HuiPCH.2.2

Console access to weakly protected account of Human on stolen device Host: an attacker with possession of device Host exploits lax password security by user Human to access processes running under their account.