Standard attack pattern
Draft
CAPEC-89: Pharming
A pharming attack occurs when the victim is fooled into entering sensitive data into supposedly trusted locations, such as an online bank site or a trading platform. An attacker can impersonate these supposedly trusted sites and have the victim be directed to their site rather than the originally intended one. Pharming does not require script injection or clicking on malicious links for the attack to succeed.
Very High
Typical severity
Per MITRE
High
Likelihood of attack
Per MITRE
2
Related weaknesses
CWEs this targets
Standard
Abstraction
MITRE classification
Overview
CAPEC-89 (Pharming) is a standard-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.