CarbonSteal
Software · ATTACK:mobile:S0529
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S0529",
"title": "CarbonSteal",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0529",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--007ebf84-4e14-44c7-a5aa-151d5de85320",
"external_id": "S0529",
"domain": "mobile",
"created": "2020-11-10T16:50:38.917Z",
"modified": "2025-04-25T14:40:13.122Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Lookout Uyghur Campaign",
"url": "https://www.lookout.com/documents/threat-reports/us/lookout-uyghur-malware-tr-us.pdf"
}
]
}Explicit source assertions (17)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S0529 → uses → ATTACK:mobile:T1521.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--40f30137-4db9-4596-b4c7-a12f1497fd92
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1418
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--43eeee7f-339a-4f6e-9df3-ccbf08ecf358
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1655.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--533e5ce5-138c-4bfc-9a59-eb0ced8e6e1a
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1575
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--66c7fdcf-b9ef-429e-81b2-e97e971cfb42
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1616
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--684c17bb-2075-4e1f-9fcb-17408511222d
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1407
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6f9f892e-56ec-480b-aa40-337f20f2bb9c
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1426
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--760faa7b-06cb-48b7-9103-1c52f2ca408f
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1422
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8870c211-820a-46a1-96fc-02f4e6eaec03
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1430
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a09f8daa-aa02-45f1-8dac-9bea355c9415
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1429
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b4735277-516a-4cd2-9607-a3e415945d93
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1420
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ba8735ad-b9c6-4b35-9fac-d4747ab0b2ae
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1409
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d5928f73-c4ba-4eb1-bf8a-e75ff6806a4a
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1406
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d7aa436a-e66d-4217-be66-4414703dec07
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1636.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ddca1254-b404-4850-9566-0be35c6d7564
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1644
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e33106e1-16ef-41b8-8d47-78c9f2b4dceb
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1422.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e5922453-d9b1-472b-b947-b1eaa426a32e
Lookout Uyghur CampaignATTACK:mobile:S0529 → uses → ATTACK:mobile:T1630.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f6f21954-c592-40d8-b7a0-75f332c42eaa
Lookout Uyghur Campaign