aol.pm

Escobar

Software · ATTACK:mobile:S1092

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:mobile:S1092",
  "title": "Escobar",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1092",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--ec13d292-6d8d-4c7a-b07c-a2bd2402569a",
  "external_id": "S1092",
  "domain": "mobile",
  "created": "2023-09-28T17:04:46.516Z",
  "modified": "2023-10-11T14:36:10.445Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Bleeipng Computer Escobar",
      "url": "https://www.bleepingcomputer.com/news/security/android-malware-escobar-steals-your-google-authenticator-mfa-codes/"
    }
  ]
}

Explicit source assertions (16)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1636.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--12d14048-793c-456c-a2b8-d812de547ca7

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1512

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2f9c31d2-2e6c-4e95-9058-c9a8def46865

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1616

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3a282967-0536-474d-8831-30cd60b818a9

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1461

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--48cd0af5-9ad1-44b3-beeb-d576974dadee

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1430

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--50d8e788-d405-45e8-b6b7-0f02f353cc97

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1409

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ba116807-ef1c-4621-84c8-9921fa7b735e

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1420

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--be8d0cd6-be77-456e-bcfb-6325cb8ba137

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1636.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--befa3b5a-e4f4-4ed3-ada1-860a034284d2

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1517

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cc0b8984-f561-4453-a2be-9be8bd62561e

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1582

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cdf06664-903e-499b-86b4-b7bcce3c0740

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1663

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cf2cfc6e-896a-4c99-b286-41f8dbd6fa4c

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1533

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dae02ffb-1db5-4b7d-80a9-2a8cbf1bc852

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1417.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e95ac47c-8822-4ce5-bd65-f61ca873854b

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ec734b52-a823-495c-9684-c4649269723e

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1429

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f5acd046-2943-48bf-836a-2109c4f1a5c4

Bleeipng Computer Escobar

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1417.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fbeef07b-7aa1-461c-884a-d3c4f730d5f7

Bleeipng Computer Escobar

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.