ViceLeaker
Software · ATTACK:mobile:S0418
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S0418",
"title": "ViceLeaker",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0418",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--6fcaf9b0-b509-4644-9f93-556222c81ed2",
"external_id": "S0418",
"domain": "mobile",
"created": "2019-11-21T16:42:48.203Z",
"modified": "2026-09-02T18:49:49.431Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "ViceLeaker"
},
{
"source_name": "Triout"
},
{
"source_name": "SecureList - ViceLeaker 2019",
"url": "https://securelist.com/fanning-the-flames-viceleaker-operation/90877/"
},
{
"source_name": "Bitdefender - Triout 2018",
"url": "https://labs.bitdefender.com/2018/08/triout-spyware-framework-for-android-with-extensive-surveillance-capabilities/"
}
]
}Explicit source assertions (15)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1636.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--035192e3-94f4-426d-9be9-312ddd1ce6a8
SecureList - ViceLeaker 2019ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1426
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--271a311f-71bc-4558-a314-0edfbec44b64
SecureList - ViceLeaker 2019ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1646
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--41da5845-a1a8-4d10-8929-053be3496396
SecureList - ViceLeaker 2019 · Bitdefender - Triout 2018ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1418
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--50bab448-fee6-49e9-a296-498fe06eacc7
SecureList - ViceLeaker 2019ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1636.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5aa167b8-4166-440b-b49f-bf1bab597237
SecureList - ViceLeaker 2019ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1544
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6176a297-3097-42e2-b1c2-815e7fd8c81c
SecureList - ViceLeaker 2019ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1476
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--986cb3bf-98bb-4558-bec4-bd8c015449fd
SecureList - ViceLeaker 2019ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1430
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a1023a75-31cc-420a-9c59-b440f7fb27e6
SecureList - ViceLeaker 2019 · Bitdefender - Triout 2018ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1630.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bc79d59b-1828-4133-9f8f-df8cad9543a8
SecureList - ViceLeaker 2019ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1655.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c16c7904-3c85-49de-a0f4-872f4227d775
SecureList - ViceLeaker 2019ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1512
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c5db5bb5-9877-43cd-8851-5aa62405dcb2
SecureList - ViceLeaker 2019ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1437.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d59da983-c521-47b6-83ab-435f7d58611d
SecureList - ViceLeaker 2019 · Bitdefender - Triout 2018ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1533
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e7b7e813-4867-46fe-bf86-6f367553d765
SecureList - ViceLeaker 2019 · Bitdefender - Triout 2018ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1628.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f31490e8-ef81-40d5-bba9-24ca580d2ee6
Bitdefender - Triout 2018ATTACK:mobile:S0418 → uses → ATTACK:mobile:T1429
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f632b0bb-69ce-4678-bc3c-9ddff5a38794
SecureList - ViceLeaker 2019 · Bitdefender - Triout 2018