A maintenance technician plugs a vendor laptop and USB drive into a control network and malware copies itself to the engineering workstation. Which ATT&CK for ICS technique is this?
- A.Exploit Public-Facing Application
- B.Replication Through Removable Media
- C.Spearphishing Attachment
- D.Wireless Compromise of radios
Why B is correct
Malware spreading from a portable drive into an isolated network is Replication Through Removable Media. The others describe attacks through an internet service, a radio link, or an email attachment, none of which occurred.
Know someone studying for OT Security Fundamentals? Send them this one.