What will a threat actor do to create a back door on a compromised target according to the Cyber Kill Chain model?Add services and autorun keys.Open a two-way communications channel to the CnC infrastructure.Obtain an automated tool to deliver the malware payload.Collect and exfiltrate data.Navigation Bar

The Cyber Kill Chain model is a sequence of steps that trace stages of a cyberattack from the early reconnaissance stages to the exfiltration of data. The steps you mentioned seem to be out of order. Here's how a threat actor would typically create a backdoor on a compromised target according to the Cyber Kill Chain model:

1. Reconnaissance: The threat actor first identifies the target and gathers as much information as possible about it. This could involve understanding the target's vulnerabilities, which could be exploited later.

2. Weaponization: The threat actor creates a malware payload that can exploit the vulnerabilities identified in the previous step. This could be a virus, worm, or any other type of malicious software.

3. Delivery: The threat actor delivers the malware to the target. This could be done through various methods such as email attachments, malicious downloads, or infected USB drives.

4. Exploitation: The malware exploits the identified vulnerability to create a breach in the target's security. This could involve running malicious code that takes advantage of the vulnerability.

5. Installation: The malware installs a backdoor on the target. This could involve adding services and autorun keys to ensure that the backdoor remains even if the system is rebooted.

6. Command and Control (CnC): The malware opens a two-way communication channel to the CnC infrastructure. This allows the threat actor to control the target remotely.

7. Actions on Objectives: The threat actor can now carry out their intended actions, such as collecting and exfiltrating data.

So, to create a backdoor on a compromised target, a threat actor would typically identify a vulnerability (Reconnaissance), create a malware payload (Weaponization), deliver the malware to the target (Delivery), exploit the vulnerability (Exploitation), install the backdoor (Installation), establish a connection to their CnC infrastructure (Command and Control), and finally carry out their intended actions (Actions on Objectives).