Drinik
Software · ATTACK:mobile:S1054
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S1054",
"title": "Drinik",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1054",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--d6e009b7-df5e-447a-bfd2-d5b77374edfe",
"external_id": "S1054",
"domain": "mobile",
"created": "2023-01-18T19:05:43.194Z",
"modified": "2024-11-17T18:11:27.761Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "cyble_drinik_1022",
"url": "https://web.archive.org/web/20221114031945/https://blog.cyble.com/2022/10/27/drinik-malware-returns-with-advanced-capabilities-targeting-indian-taxpayers/"
}
]
}Explicit source assertions (14)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1582
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--08a43019-d393-451f-a23c-2dfa17ec40b2
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1629.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2359ad4b-b00b-4fd5-aef8-2d2be8bcf081
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1646
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b065fcf-7ed1-4f88-8910-2eb46bde9ab7
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1616
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4e68feca-083f-40ed-88d8-2b6a3935c949
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1417.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6b74d347-4d28-401f-9ac2-b3e1c9428bab
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1513
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7ba4fb2e-99ff-41ff-8b07-f02e9f74e890
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1417.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--848581bc-bf8f-40e2-871e-cd67042b4adf
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1541
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8a255d63-a770-4b9d-911c-bd906733ceef
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1636.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8b3e74ad-7cc4-4ed2-84d2-c745e6997711
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1636.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8c656539-aa1e-42db-9016-d38f1daaae16
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1406
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8e6b9c1e-5e28-4519-95c3-6b4a836661de
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1533
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--98ae9cb2-1141-48c6-81fd-f16adb430031
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1437
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bd952153-4902-4fc4-8e2e-b7c7b8bad7f1
cyble_drinik_1022ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1628.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e245e45a-71a8-408d-8f32-7b7337bffc26
cyble_drinik_1022