T0843.001: Download All
Essential information
- MITRE technique ID
T0843.001- Confidence
- 75/100
- Revoked
- No
- Published
- 20/04/2026 22:54
- Modified
- 04/05/2026 16:52
- Author / Source
- The MITRE Corporation
Description
Adversaries may execute a full program download to a PLC to overwrite the entire PLC program and configuration to deploy a new project or make major changes. This typically requires stopping the PLC and adversely impacting control processes.
The ability to perform a full program download to the PLC typically relies on access to a workstation with the vendor-specific PLC programming software installed.
Kill chain phases
| Kill chain | Phase |
|---|---|
| mitre-ics-attack-v19 | lateral-movement |
| mitre-ics-attack | lateral-movement |
Marking (TLP)
Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.