Application & OT Security · Foundational

Weaponization

The kill-chain stage where an attacker couples an exploit with a deliverable payload, such as a malicious document.

Definition

During weaponization, the attacker prepares the tools used for the attack, typically embedding an exploit and backdoor into a file or link. It happens on the attacker's side, so defenders rarely observe it directly. Threat intelligence on attacker tooling is the main way to anticipate it.

Related terms