Technique
№ 007 · class: initial access
Drive-by Download
Drive-by download is automatic malware download when visiting a compromised site.
Term
description · examples · notesDrive-by download is automatic malware download when visiting a compromised site.
Description
It requires no user interaction beyond visiting the page.
It exploits vulnerabilities in browsers, Java, Flash, or PDF plugins.
Exploit kits automate exploit selection based on the victim's browser.
A common vector in malvertising and watering hole campaigns.
Examples
- Angler Exploit Kit — automated drive-by attacks
- Malvertising campaigns via compromised ad networks
Notes
- Similar to watering hole technique but applicable to any site.
Mentioned in the news
Threats
used by 4Threats that use it. Select one to open its page.
Defenses
countered by 4How it is countered. Select one to open its page.