aol.pm

Internet Connection Discovery

Subtechnique · ATTACK:mobile:T1422.001

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:mobile:T1422.001",
  "title": "Internet Connection Discovery",
  "type": "Subtechnique",
  "source_url": "https://attack.mitre.org/techniques/T1422/001",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--45a5fe76-eda3-4d40-8f22-c186efd6278d",
  "external_id": "T1422.001",
  "domain": "mobile",
  "created": "2024-02-20T23:39:08.047Z",
  "modified": "2024-02-20T23:39:08.047Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [
    "discovery"
  ],
  "source_references": [
    {
      "source_name": "adb_commands",
      "url": "https://gist.github.com/Pulimet/5013acf2cd5b28e55036c82c91bd56d8"
    }
  ]
}

Explicit source assertions (21)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S0427 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--09059576-658b-4944-9f7b-df003319fdaa

SecurityIntelligence TrickMo

ATTACK:mobile:S1061 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--112966ab-6e28-482b-8bea-ed9f4ed17064

lookout_abstractemu_1021

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--17697784-f6e0-4062-adaa-7779e44e2d62

Lookout-Monokle

ATTACK:mobile:S0509 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--18905da3-a92e-4b1b-ae5c-1de1e4d35495

Cybereason FakeSpy

ATTACK:mobile:S0545 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--23522416-9493-4960-8408-f7befae7be60

WhiteOps TERRACOTTA

ATTACK:mobile:S0326 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2ae97bcd-0481-415c-8337-12d3a30e6911

Wandera-RedDrop

ATTACK:mobile:S0405 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3a5dee7b-92a2-4382-aa02-2c14d0b82010

SWB Exodus March 2019

ATTACK:mobile:S1056 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--520668a0-2523-4515-8ed9-f8059023632f

trendmicro_tianyspy_0122

ATTACK:mobile:S1093 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--71fbb52a-1808-45a1-8cc2-13b461376e4a

Trend Micro FlyTrap

ATTACK:mobile:S0463 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--73e78aab-bcd9-4d3c-96f8-832f399bf2ee

Google Project Zero Insomnia

ATTACK:mobile:S0540 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--826e3bad-fa02-4fd9-b8f1-1d23f374b43d

Securelist Asacub

ATTACK:mobile:T1422.001 → subtechnique-of → ATTACK:mobile:T1422

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--aeb2d1a0-2180-4032-a395-7573dbd392f4

ATTACK:mobile:S0522 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c056b1d4-c70b-403e-b396-18840865ca7d

Threat Fabric Exobot

ATTACK:mobile:S1077 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c40cba48-7714-4d03-b748-cadd03360e7a

lookout_hornbill_sunbird_0221

ATTACK:mobile:M1009 → mitigates → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c7d382f1-6fa7-4d6b-bd18-9a0e9d9ee17c

ATTACK:mobile:S0425 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cc3e1864-0b7b-4ca1-b123-d9c7553f3398

TrendMicro Coronavirus Updates

ATTACK:mobile:S0316 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cf80894a-07e5-4c45-83a6-ed1eed81d2d8

Lookout-PegasusAndroid

ATTACK:mobile:S0506 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d447a927-c8a1-4123-bdac-ff9ab36f49be

Lookout ViperRAT

ATTACK:mobile:S0478 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e39ee008-74d1-4669-b515-4d2bb97968c1

Cybereason EventBot

ATTACK:mobile:S0529 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e5922453-d9b1-472b-b947-b1eaa426a32e

Lookout Uyghur Campaign

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e8c77126-5279-4c39-ad84-87e4ab8ce37f

lookout_bouldspy_0423

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.