Skip to content

Operation Triangulation

Campaign · ATTACK:mobile:C0054

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:C0054",
  "title": "Operation Triangulation",
  "type": "Campaign",
  "source_url": "https://attack.mitre.org/campaigns/C0054",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "campaign--d0695b5f-b761-49e0-b3e3-2e5307f8def3",
  "external_id": "C0054",
  "domain": "mobile",
  "created": "2025-03-28T14:45:30.132Z",
  "modified": "2026-07-31T20:48:21.820Z",
  "version": "1.0",
  "aliases": [
    "Operation Triangulation"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "SecureList OpTriangulation 01Jun2023",
      "url": "https://securelist.com/operation-triangulation/109842/"
    }
  ]
}

Explicit source assertions (22)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1418

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--01563962-2ccb-4bbc-8ef7-512a950ea47c

SecureList OpTriangulation 21Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1404

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0c077d44-1c79-473c-8623-d6267ab47f34

SecureList OpTriangulation 21Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1533

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--11e30c59-c1bf-4354-9255-a6eb67d7a79e

SecureList OpTriangulation 23Oct2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1630.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1508c120-06fa-4da2-8fcd-7fdc133228fa

SecureList OpTriangulation 21Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1544

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1687c7a0-a453-4737-a10d-c57b94d5a458

SecureList OpTriangulation 21Jun2023 · SecureList OpTriangulation 01Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1521.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--22e90a62-3f31-4190-98ee-eabede72eb07

SecureList OpTriangulation 21Jun2023 · SecureList OpTriangulation 23Oct2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1430

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3bcd5bc8-4998-4f71-85d6-27f0cb22e895

SecureList OpTriangulation 21Jun2023 · SecureList OpTriangulation 23Oct2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1422

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--54da16fe-c3af-4283-8e73-434beca633d4

SecureList OpTriangulation 21Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1630

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--59ccdf54-af53-45f2-9ada-549bbc9fb53f

SecureList OpTriangulation 01Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1424

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--618ec7db-fb08-4693-905b-49e9e2a0ad95

SecureList OpTriangulation 21Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1420

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--686a6bc8-d660-40ad-97bc-9c900195cd5b

SecureList OpTriangulation 21Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1634.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6945812f-959b-4f4c-9bf4-6dbdc6d9f7c8

SecureList OpTriangulation 21Jun2023 · SecureList OpTriangulation 23Oct2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1658

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6dada572-9e79-4835-9f8c-fcb6a94947af

SecureList OpTriangulation 23Oct2023 · SecureList OpTriangulation 01Jun2023 · SecureList OpTriangulation Dec2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1437

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--85d9c54e-a434-4533-9755-aff1aeb9cc23

SecureList OpTriangulation 21Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1636.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--92cc4942-453e-49af-bc04-18cb99493b73

SecureList OpTriangulation 23Oct2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1429

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9a90aacf-3b03-4100-a600-5c455d4e48de

SecureList OpTriangulation 23Oct2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1521.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9caeaf97-ca4e-4417-8148-d9a38b141047

SecureList OpTriangulation 21Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1575

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b0f009b5-cf5e-4333-a969-03adbe4de3ee

SecureList OpTriangulation 23Oct2023 · SecureList OpTriangulation Dec2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1409

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b8879a8a-84ff-4625-b487-7922d8a1b6a6

SecureList OpTriangulation 23Oct2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:S1215

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bb3bd38c-0b82-4c58-8e25-2fbab235a551

SecureList OpTriangulation 23Oct2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:T1426

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bf02dea9-17cb-41f8-b362-c3081da81199

SecureList OpTriangulation 01Jun2023

ATTACK:mobile:C0054 → uses → ATTACK:mobile:S1216

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cd7f9e74-e134-408d-aeb2-1ce19d4dd4e3

SecureList OpTriangulation 21Jun2023

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.