Supply-chain abuse is the misuse of manufacturing, packaging, shipping, or preinstallation steps to place unwanted software or settings onto a device before the user fully controls it. Instead of attacking only the endpoint, the adversary takes advantage of trust in the product’s delivery path.
This matters because software added early can be harder to notice, harder to remove, and more persistent than a later infection. It can create backdoors, ad fraud tools, proxy services, or monitoring code that looks like part of the normal device image. In real attacks, defenders often look for unexpected apps, altered firmware, unsigned updates, or device identities that do not match the hardware. Common defenses include verified boot, firmware signing, secure update channels, attestation, vendor audits, and refusing to trust devices that ship with unexplained privileges or preloaded software.