Direct Attack to Space Communication Links: Exploitation of clear mode (also known as safe mode)

ID Name
T2008.004 Exploitation of clear mode (also known as safe mode)
T2008.006 Record and replay TC/TM or mission specific packets

An attacker can exploit the TC channel if a spacecraft is in clear mode, e.g., during safe mode of operation. [1]

Standard/references: [2] [3] [4] [5] [6] [7]

ID: T2008.004
Sub-technique of:  T2008
Tactic: Initial Access
Platforms: Space-link communication
Version: 2.0
Created: 25 August 2022
Last Modified: 21 April 2023

Mitigations

This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.

References