aol.pm

BRATA

Software · ATTACK:mobile:S1094

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:mobile:S1094",
  "title": "BRATA",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1094",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--5aff44ab-5a41-49bb-b5d1-b4876d0437f4",
  "external_id": "S1094",
  "domain": "mobile",
  "created": "2023-12-18T18:06:22.975Z",
  "modified": "2024-04-17T17:06:28.821Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "cleafy_brata_0122",
      "url": "https://www.cleafy.com/cleafy-labs/how-brata-is-monitoring-your-bank-account"
    },
    {
      "source_name": "mcafee_brata_0421",
      "url": "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/brata-keeps-sneaking-into-google-play-now-targeting-usa-and-spain/"
    },
    {
      "source_name": "securelist_brata_0819",
      "url": "https://securelist.com/spying-android-rat-from-brazil-brata/92775/"
    }
  ]
}

Explicit source assertions (27)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1407

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--11113fa5-150e-4574-89fc-5db66479e268

cleafy_brata_0122 · mcafee_brata_0421

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1430

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--143833fb-8034-4e75-a030-d8e47f9bebef

cleafy_brata_0122

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--257f4f86-950f-4f5a-b38c-0de85753d2d3

mcafee_brata_0421 · securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1513

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2e55d0cf-afe6-41f1-8ad3-0d1a910ad010

mcafee_brata_0421 · securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1461

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4159bc09-ddf3-4d88-9bf0-853ace9c8151

securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1662

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4267ebfa-d932-4949-9d7f-8e183f51f2d9

cleafy_brata_0122

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1417.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4dcbb081-a0b3-4b80-a63e-28547cb6f89c

cleafy_brata_0122 · mcafee_brata_0421 · securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1641.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5749763a-0aef-460a-b081-849adba8d58f

mcafee_brata_0421

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1426

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--583720d0-8b15-4662-822e-bb40bc1df940

securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1406

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5fb59cf9-9af5-4dd5-9878-dda2ba228ae5

cleafy_brata_0122 · mcafee_brata_0421

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--606b07b9-b5a4-464f-8381-062e2134d0ab

cleafy_brata_0122 · mcafee_brata_0421

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1627.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6db7839a-5699-4e2a-8410-4e33bf88ba05

mcafee_brata_0421

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1418.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7a860f1b-fd19-48aa-b0b3-fbaa3d045dac

cleafy_brata_0122

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1633.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7f3f4abd-f097-4ab5-b9ae-7ffc1a2e015e

mcafee_brata_0421

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1616

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--80eb5ebc-ae6f-461e-8e78-a18702249343

mcafee_brata_0421

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1646

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--98632824-9fe4-4992-aafe-31c5eac66ec1

cleafy_brata_0122

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1655.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--98aee077-156a-4d11-94fe-b5b7c4945ff9

mcafee_brata_0421 · securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1628.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9c545cbb-4949-4695-8d6b-b480478d3e20

securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1437.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a1ff77ee-76fd-4dd3-94aa-dbf35d971e58

cleafy_brata_0122

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1516

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a4e72b4f-7ee4-4ee3-82c9-acc3aedb1f2d

mcafee_brata_0421 · securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1532

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a609b20b-6955-4c59-84d4-a3496d95fba1

cleafy_brata_0122

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1663

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a68b17af-5277-4722-9a2d-0924f07ca421

cleafy_brata_0122

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1664

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b162dc6b-6b4e-4bba-928a-00a423b112b3

securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1417.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c1cafa91-9891-4e65-b75d-d83ef6838653

cleafy_brata_0122

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1660

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c8bfe893-49d8-4d6c-8f7d-5cd9fc932dee

securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1533

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d056308f-dca7-493e-b152-6f77fa13155d

securelist_brata_0819

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1406.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dfdf329f-8fc3-4dcb-89b4-c3f1095cd77a

mcafee_brata_0421

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.