Ransomware (Attack Tree)
Paths an attacker could take to deploy ransomware.
Make it your own.
title "Deploy ransomware"
goal G "Encrypt company files"
OR G1 "Initial access" parent G
AND G2 "Privilege escalation" parent G
OR G3 "Lateral movement" parent G
leaf L1 "Phishing attachment" parent G1 cost 1 skill low detect medium
leaf L2 "Exploit VPN CVE" parent G1 cost 4 skill high detect medium
leaf L3 "Steal admin token" parent G2 cost 3 skill medium detect high
leaf L4 "Abuse misconfiguration" parent G2 cost 2 skill medium detect low
leaf L5 "Pass-the-hash" parent G3 cost 3 skill high detect medium