Which Kill Chain stage triggers when the adversary's malicious code exploits a vulnerability after the initial weapon is transmitted?

Which Kill Chain stage triggers when the adversary's malicious code exploits a vulnerability after the initial weapon is transmitted?

• A. Delivery
• B. Exploitation
• C. Reconnaissance
• D. Command and Control

Answer: (B)

Exploitation is the stage where the delivered payload takes advantage of a vulnerability in the target to actually execute the malware. After the weapon has been transmitted (delivery), exploitation occurs when the vulnerability is exploited to run code on the system. This leads to the attacker gaining the ability to install further components or establish control. Reconnaissance is prior information gathering, and Command and Control happens after the malware is installed and a channel is established. So, when the malicious code exploits a vulnerability after delivery, that moment is exploitation.

Exploitation is the stage where the delivered payload takes advantage of a vulnerability in the target to actually execute the malware. After the weapon has been transmitted (delivery), exploitation occurs when the vulnerability is exploited to run code on the system. This leads to the attacker gaining the ability to install further components or establish control. Reconnaissance is prior information gathering, and Command and Control happens after the malware is installed and a channel is established. So, when the malicious code exploits a vulnerability after delivery, that moment is exploitation.