T1491 - Defacement

Tactics:
Impact
Platforms:
Windows IaaS Linux macOS +1
Detection:
Not specified
Description:
Adversaries may modify visual content available internally or externally to an enterprise network, thus affecting the integrity of the original content. Reasons for [Defacement](https://attack.mitre.org/techniques/T1491) include delivering messaging, intimidation, or claiming (possibly false) credit for an intrusion. Disturbing or offensive images may be used as a part of [Defacement](https://attack.mitre.org/techniques/T1491) in order to cause user discomfort, or to pressure compliance with accompanying messages.
Sub-techniques (2)
ID ATT&CK Actions
T1491.001 Internal Defacement
T1491.002 External Defacement
Metadata
MITRE ID: T1491
STIX ID: attack-pattern--5909f20f-3c39-...
Platforms: Windows, IaaS, Linux, macOS, ESXi
Created: 13/01/2026 17:48
Updated: 14/03/2026 04:00