T1525 · Implant Internal Image

Sunturai

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice

T1525 · Implant Internal Image · Sunturai

attack-patternenterprise-attackT1525

Implant Internal Image

attack-pattern--4fd8a28b-4b3a-4cd6-a8cf-85ba5f824a7f

Adversaries may implant cloud or container images with malicious code to establish persistence after gaining access to an environment. Amazon Web Services (AWS) Amazon Machine Images (AMIs), Google Cloud Platform (GCP) Images, and Azure Images as well as popular container runtimes such as Docker can be implanted or backdoored. Unlike Upload Malware, this technique focuses on adversaries implanting an image in a registry within a victim’s environment. Depending on how the infrastructure is provisioned, this could provide persistent access if the infrastructure provisioning tool is instructed to always use the latest image.(Citation: Rhino Labs Cloud Image Backdoor Technique Sept 2019) A tool has been developed to facilitate planting backdoors in cloud container images.(Citation: Rhino Labs Cloud Backdoor September 2019) If an adversary has access to a compromised AWS instance, and permissions to list the available container images, they may implant a backdoor such as a Web Shell.(Citation: Rhino Labs Cloud Image Backdoor Technique Sept 2019)

Created: Sep 4, 2019, 12:04 PM UTC
Modified: Oct 24, 2025, 5:48 PM UTC

3 published detections cover this technique

Every one carries the source it came from and the licence it was published under.

Detections covering this technique
Detection	Severity	Source	Published	Licence
AWS Bedrock Untrusted Model Imported or Marketplace Endpoint Registered	Medium	Elastic detection rules	Oct 2, 2026	Elastic License 2.0
AWSCloudTrail - Lambda layer imported from external account	Medium	Microsoft Sentinel analytics	Aug 29, 2026	MIT License
AWS ECS Task Definition That Queries The Credential Endpoint	Medium	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1

Showing 3 of 3

Filter in the catalogue

External references

mitre-attackT1525Open reference

Rhino Labs Cloud Image Backdoor Technique Sept 2019Open reference

Rhino Labs Cloud Backdoor September 2019Open reference

Platforms

ContainersIaaS

Kill chain phases

persistence

Relationships

Incoming and outgoing edges in the selected ATT&CK release.

Incoming and outgoing edges in the selected ATT&CK release
Direction	Type	Related object