Sub-technique Payload Delivery

Installer Package Attachment

The attached file is a software installer package, such as an MSI or MSIX file. In most workplaces software comes from IT, so an installer arriving by email is unusual.

Mapped to

MITRE ATT&CK®

T1566.001Spearphishing Attachment

Inherited from the parent entry.

Connected in PH!SH

Themes

TH0005Document Sharing Service Impersonation TH0015Billing Notice TH0016Procurement Request