TangleBot
Software · ATTACK:mobile:S1069
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S1069",
"title": "TangleBot",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1069",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--68156e5a-4c3a-46dd-9c5e-c0bfdec6651f",
"external_id": "S1069",
"domain": "mobile",
"created": "2023-02-28T21:39:52.744Z",
"modified": "2025-04-16T21:22:09.556Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "cloudmark_tanglebot_0921",
"url": "https://www.cloudmark.com/en/blog/malware/tanglebot-new-advanced-sms-malware-targets-mobile-users-across-us-and-canada-covid-19"
}
]
}Explicit source assertions (12)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1418
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--22041a01-75e7-4ff6-8768-ad45188c53c7
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1430
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--276bfd69-33cc-4665-8aa7-72bed65d01f9
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1512
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2d3198ff-a481-47ec-ae64-13d7be706929
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1636.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3841024e-1047-40fa-9e25-ac6d5c14612a
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1533
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--481e5d33-eca4-453c-9fec-27ee01d50989
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1616
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4aae6ab8-2a67-4780-a69e-b15ecff7fc5d
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1417.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4ff9b16f-3643-4fa0-b107-f93a9bb847c3
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1429
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6846dc09-b66a-42d3-aea2-c80b51f22952
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1636.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--75989cf6-c023-4ed3-9d23-a83f55690186
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1513
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--79ef0025-3e1c-4914-9873-19808c2a5bec
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1582
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b19082d2-c151-45dd-8844-82335fbe3ed9
cloudmark_tanglebot_0921ATTACK:mobile:S1069 → uses → ATTACK:mobile:T1636.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dbef53a9-f9c4-4582-8e93-349ad488de12
cloudmark_tanglebot_0921