{ "id": "bundle--2b2dfb98-5c8c-4bcb-b4fa-cfc923ddad20", "objects": [ { "created": "2015-11-09T00:00:00.000Z", "created_by_ref": "identity--e50ab59c-5c4f-4d40-bf6a-d58418d89bcd", "description": "Attacks that reveal the password/passcode pattern on a touchscreen device by detecting oil smudges left behind by the user’s fingers.", "external_references": [ { "external_id": "CAPEC-626", "source_name": "capec", "url": "https://capec.mitre.org/data/definitions/626.html" } ], "id": "attack-pattern--0fda524b-2218-4aec-bf3e-6f345d13e459", "modified": "2019-09-30T00:00:00.000Z", "name": "Smudge Attack", "object_marking_refs": [ "marking-definition--17d82bb2-eeeb-4898-bda5-3ddbcd2b799d" ], "spec_version": "2.1", "type": "attack-pattern", "x_capec_abstraction": "Detailed", "x_capec_child_of_refs": [ "attack-pattern--5e808864-44b1-478c-8cb0-75c55cd51e2b" ], "x_capec_consequences": { "Access_Control": [ "Bypass Protection Mechanism" ] }, "x_capec_domains": [ "Physical Security" ], "x_capec_prerequisites": [ "The attacker must have physical access to the device." ], "x_capec_skills_required": { "Medium": "The attacker must know how to make use of these smudges." }, "x_capec_status": "Draft", "x_capec_version": "3.9" } ], "type": "bundle" }