Adversary-in-the-Middle

{
  "id": "ATTACK:mobile:T1638",
  "title": "Adversary-in-the-Middle",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1638",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--08e22979-d320-48ed-8711-e7bf94aabb13",
  "external_id": "T1638",
  "domain": "mobile",
  "created": "2022-04-05T20:11:08.894Z",
  "modified": "2025-10-24T17:48:21.401Z",
  "version": "2.2",
  "aliases": [

  ],
  "tactics": [
    "collection"
  ],
  "source_references": [
    {
      "source_name": "mitd_checkpoint",
      "url": "https://blog.checkpoint.com/security/man-in-the-disk-a-new-attack-surface-for-android-apps/"
    },
    {
      "source_name": "mitd_kaspersky",
      "url": "https://usa.kaspersky.com/blog/man-in-the-disk/16089/"
    },
    {
      "source_name": "NSC_Android",
      "url": "https://www.nowsecure.com/blog/2018/08/15/a-security-analysts-guide-to-network-security-configuration-in-android-p/"
    },
    {
      "source_name": "mitd_checkpoint_research",
      "url": "https://research.checkpoint.com/androids-man-in-the-disk/"
    },
    {
      "source_name": "NIST Mobile Threat Catalogue",
      "url": "https://pages.nist.gov/mobile-threat-catalogue/cellular-threats/CEL-3.html",
      "external_id": "CEL-3"
    },
    {
      "source_name": "NIST Mobile Threat Catalogue",
      "url": "https://pages.nist.gov/mobile-threat-catalogue/application-threats/APP-0.html",
      "external_id": "APP-0"
    },
    {
      "source_name": "NIST Mobile Threat Catalogue",
      "url": "https://pages.nist.gov/mobile-threat-catalogue/application-threats/APP-1.html",
      "external_id": "APP-1"
    },
    {
      "source_name": "NIST Mobile Threat Catalogue",
      "url": "https://pages.nist.gov/mobile-threat-catalogue/application-threats/APP-8.html",
      "external_id": "APP-8"
    },
    {
      "source_name": "NIST Mobile Threat Catalogue",
      "url": "https://pages.nist.gov/mobile-threat-catalogue/ecosystem-threats/ECO-12.html",
      "external_id": "ECO-12"
    }
  ]
}