Skip to content

Ginp

Software · ATTACK:mobile:S0423

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:S0423",
  "title": "Ginp",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0423",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--6146be90-470c-4049-bb3a-9986b8ffb65b",
  "external_id": "S0423",
  "domain": "mobile",
  "created": "2020-04-08T15:51:24.862Z",
  "modified": "2025-04-25T14:40:28.434Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "ThreatFabric Ginp",
      "url": "https://www.threatfabric.com/blogs/ginp_a_malware_patchwork_borrowing_from_anubis.html"
    }
  ]
}

Explicit source assertions (12)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1633.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1cc71849-142f-4097-9546-7946b0b546a6

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1636.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1f7b7de2-10e8-4eec-9c8f-db44ac3f271b

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1516

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--43a62244-29f1-4f7f-bc9f-9b7b8e488b38

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1628.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--57293fc9-8838-4acd-a16f-48f516d0921e

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1513

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--65803bfa-7601-44ad-95ea-64d8bfd778a4

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1417.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--74c3c88c-956b-4bc7-9ea2-585e7366fe69

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1655.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8e67f2e0-65da-4d27-9d41-e2f9a174331b

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1418

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a04dfb58-b7d3-4abe-9f4a-fad4f7158965

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1582

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eb1eeb37-37a8-47b6-aff8-9703735a4d93

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1533

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f240e06c-3a5b-4a34-a69c-5fccb4c94150

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1406

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f88cbb0c-ca34-4a87-82fa-e0e567ee8d57

ThreatFabric Ginp

ATTACK:mobile:S0423 → uses → ATTACK:mobile:T1636.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fff16b5e-49c2-45e2-8b3a-fd5f82c96dd9

ThreatFabric Ginp

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.