Red Alert 2.0
Software · ATTACK:mobile:S0539
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S0539",
"title": "Red Alert 2.0",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0539",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--6e282bbf-5f32-476a-b879-ba77eec463c8",
"external_id": "S0539",
"domain": "mobile",
"created": "2020-12-14T14:52:02.949Z",
"modified": "2026-09-02T18:49:02.748Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Sophos Red Alert 2.0",
"url": "https://news.sophos.com/en-us/2018/07/23/red-alert-2-0-android-trojan-targets-security-seekers/"
}
]
}Explicit source assertions (14)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1407
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--346b7e4a-dbd1-486b-ba26-55ae2ac613d0
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1582
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--38f37e3f-1d4b-4f04-b176-1cae6d22931e
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1417.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--45da5ed9-3a9b-4491-98cb-96db68e245bb
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1636.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--476e269e-3c49-4fda-a54b-3f0cb577c5af
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1636.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4e9f021d-3cf4-4790-8f7d-f87f33133446
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1626.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--56551987-326a-46ad-a34a-59bb7ab793a9
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1655.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--76f852f3-f218-40e2-8fa1-6fb15c4cbf98
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1476
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7ba3b225-5446-4e9d-886b-1eb5c503e77a
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1481.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a3c9d5d6-acc5-46e9-9e4f-b078aeac553c
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1509
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a427ce33-d1e1-4c38-a024-e44fc00033d3
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1437.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ba02a1dc-d5b9-41cb-9adf-883119e1aa51
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1406
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bb006be2-7d2c-4bb3-ab48-7c95e0ab8106
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1636.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eb052029-e1c9-4f24-8594-299aaec7f1df
Sophos Red Alert 2.0ATTACK:mobile:S0539 → uses → ATTACK:mobile:T1418
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f4cc3b3a-284d-4a2d-9ab8-e7fa916c4012
Sophos Red Alert 2.0