Internet Explorer home page modification

BIOC Low

Internet Explorer home page modification

The Internet Explorer home page could be changed to a malicious page.

Module:: Platform Analytics
Agent event type:: Registry
Category:: Tampering
Status:: Enabled

ATT&CK tactics: Impact (TA0040) Credential Access (TA0006)

ATT&CK techniques: Defacement (T1491) Input Capture: GUI Input Capture (T1056.002)

Indicator:

Registry action type = all AND registry key name = *\Software\Microsoft\Internet Explorer\Main\* AND registry value name = *Start Page* Process initiated by != iexplore.exe AND cgo name != iexplore.exe Host host os = windows

Preventable: yes