Bidirectional Communication
Subtechnique · ATTACK:mobile:T1481.002
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:T1481.002",
"title": "Bidirectional Communication",
"type": "Subtechnique",
"source_url": "https://attack.mitre.org/techniques/T1481/002",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--939808a7-121d-467a-b028-4441ee8b7cee",
"external_id": "T1481.002",
"domain": "mobile",
"created": "2022-04-06T15:47:06.071Z",
"modified": "2026-05-12T15:12:00.706Z",
"version": "1.2",
"aliases": [
],
"tactics": [
"command-and-control"
],
"source_references": [
]
}Explicit source assertions (5)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S0655 → uses → ATTACK:mobile:T1481.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--119b848b-84b4-4f86-a265-0c9eb8680072
SecureList BusyGasperATTACK:mobile:S0485 → uses → ATTACK:mobile:T1481.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a34f3873-3df7-4e93-915c-fc2b4af3444d
Bitdefender MandrakeATTACK:mobile:S0545 → uses → ATTACK:mobile:T1481.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b5e8cef4-e8a1-484f-baae-cf12b26e6070
WhiteOps TERRACOTTAATTACK:mobile:S9006 → uses → ATTACK:mobile:T1481.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d2210d87-3bd9-4455-b1de-2ff3772172ce
K7Dhanalakshmi_VajraSpy_April2022 · ESET_VajraSpy_Feb2024ATTACK:mobile:T1481.002 → subtechnique-of → ATTACK:mobile:T1481
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eb58117c-5803-4f72-a499-5fa888a9a7a5