Phenakite
Software · ATTACK:mobile:S1126
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S1126",
"title": "Phenakite",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1126",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--f97e2718-af50-41df-811f-215ebab45691",
"external_id": "S1126",
"domain": "mobile",
"created": "2024-03-26T18:47:29.820Z",
"modified": "2024-11-17T20:01:55.807Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "fb_arid_viper",
"url": "https://web.archive.org/web/20231126111812/https:/about.fb.com/wp-content/uploads/2021/04/Technical-threat-report-Arid-Viper-April-2021.pdf"
},
{
"source_name": "sentinelone_israel_hamas_war",
"url": "https://web.archive.org/web/20240208234008/www.sentinelone.com/labs/the-israel-hamas-war-cyber-domain-state-sponsored-activity-of-interest/"
}
]
}Explicit source assertions (11)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S1126 → uses → ATTACK:mobile:T1636.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b9a3dc1-5842-458a-97ed-3a1339d10c22
fb_arid_viperATTACK:mobile:G1028 → uses → ATTACK:mobile:S1126
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5b7c73d3-a983-456e-82fe-1c823a282eb0
fb_arid_viper · sentinelone_israel_hamas_warATTACK:mobile:S1126 → uses → ATTACK:mobile:T1655.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6a924f93-6a3a-4931-b0b3-b8bc37f0587a
fb_arid_viperATTACK:mobile:S1126 → uses → ATTACK:mobile:T1533
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7885c84c-b832-42d4-b3d3-49b82849262f
fb_arid_viperATTACK:mobile:S1126 → uses → ATTACK:mobile:T1544
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--84ece53a-eb31-4c2e-9257-a055e0a190c0
fb_arid_viperATTACK:mobile:S1126 → uses → ATTACK:mobile:T1429
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--89fcec02-8696-4c41-a7b1-8a75236a4c05
fb_arid_viperATTACK:mobile:S1126 → uses → ATTACK:mobile:T1417
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--922fa6eb-7274-477c-821e-ae6684c08934
fb_arid_viperATTACK:mobile:S1126 → uses → ATTACK:mobile:T1426
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--99011840-f920-44d1-82f9-a6ff0d4f8c07
fb_arid_viperATTACK:mobile:S1126 → uses → ATTACK:mobile:T1512
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d3d901d7-1ddd-476c-af65-15a1affc422f
fb_arid_viperATTACK:mobile:S1126 → uses → ATTACK:mobile:T1636.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dc70704a-54b3-4000-8c55-4919044de5c0
fb_arid_viperATTACK:mobile:S1126 → uses → ATTACK:mobile:T1404
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ed6ebdd2-0095-4241-b3fc-7fc22366ec0d
fb_arid_viper