SPC-16 · Mobile Threat Catalogue Archived: 2026-04-05 12:48:06 UTC Mobile Threat Catalogue Obsolete Hardware Replacement Contribute Threat Category: Supply Chain ID: SPC-16 Threat Description: A gray market adversary can exploit an obsolescence program to introduce replacement hardware with malware incorporated.1 Threat Origin Supply Chain Attack Framework and Attack Patterns 1 Exploit Examples CVE Examples Possible Countermeasures References 1. J.F. Miller, “Supply Chain Attack Framework and Attack Patterns”, tech. report, MITRE, Dec. 2013; www.mitre.org/sites/default/files/publications/supply-chain-attack-framework-14-0228.pdf ↩ ↩2 Source: https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-16.html https://pages.nist.gov/mobile-threat-catalogue/supply-chain-threats/SPC-16.html Page 1 of 1