aol.pm

Pallas

Software · ATTACK:mobile:S0399

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:mobile:S0399",
  "title": "Pallas",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0399",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--c41a8b7c-3e42-4eee-b87d-ad8a100ee878",
  "external_id": "S0399",
  "domain": "mobile",
  "created": "2019-07-10T15:35:43.217Z",
  "modified": "2026-09-02T18:45:53.804Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Pallas"
    },
    {
      "source_name": "Lookout Dark Caracal Jan 2018",
      "url": "https://info.lookout.com/rs/051-ESQ-475/images/Lookout_Dark-Caracal_srr_20180118_us_v.1.0.pdf"
    }
  ]
}

Explicit source assertions (16)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1409

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--04530307-22d8-4a06-9056-55eea225fabb

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1417.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--12d61e7d-7fa6-422d-9817-901decf6b650

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1418

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2341fdfa-9699-4798-a35a-2cc4f150cd14

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1476

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--32625429-e05a-48a5-8f0b-53c6046e9b1a

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1406

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--32958f57-ad9b-4fe1-abf3-6f92df895014

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1636.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--48486680-530c-4ed9-aca3-94969aa262b6

Lookout Dark Caracal Jan 2018

ATTACK:mobile:G0070 → uses → ATTACK:mobile:S0399

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--53364899-1ea5-47fa-afde-c210aed64120

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1421

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5a036fb8-9f72-4383-91c5-0f47b33b2c9d

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1630.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--60ecd154-e907-419a-b41d-1a9a1f59e7c3

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1636.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e2d9773-1320-4c8f-a595-2b92bf0fd8ed

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1426

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9366529d-fba9-4ef6-b4ee-b6b41aa3b18c

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1430

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a8ac5084-5631-4670-8ac6-6fbe7bdb0a84

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1429

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ce8cc50a-f3c9-4a6a-b6be-f3e8bdd293bd

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1512

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eca69d9c-7c27-4147-ad7a-a1c30317df1d

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1636.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f4d5e619-7c83-4845-aecd-de62c33cc0a1

Lookout Dark Caracal Jan 2018

ATTACK:mobile:S0399 → uses → ATTACK:mobile:T1646

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fb587f81-1300-438d-a33b-f8d08530788b

Lookout Dark Caracal Jan 2018

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.