aol.pm

Generate Traffic from Victim

Technique · ATTACK:mobile:T1643

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:mobile:T1643",
  "title": "Generate Traffic from Victim",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1643",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--a8e971b8-8dc7-4514-8249-ae95427ec467",
  "external_id": "T1643",
  "domain": "mobile",
  "created": "2022-04-06T13:55:14.390Z",
  "modified": "2025-10-24T17:49:12.043Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [
    "impact"
  ],
  "source_references": [
    {
      "source_name": "NIST Mobile Threat Catalogue",
      "url": "https://pages.nist.gov/mobile-threat-catalogue/application-threats/APP-16.html",
      "external_id": "APP-16"
    }
  ]
}

Explicit source assertions (17)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S0525 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--08c81253-975c-4780-8e85-c72bc6a90c88

WeLiveSecurity AdDisplayAshas

ATTACK:mobile:S0545 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--13078a96-2cda-4d0b-99f8-693a65a4b63d

WhiteOps TERRACOTTA

ATTACK:mobile:S0325 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1c42ee3a-c400-4de6-84aa-b254422af7b9

CheckPoint-Judy

ATTACK:mobile:M1011 → mitigates → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--20dcd886-56c4-421d-ba36-0f37a47a3f86

ATTACK:mobile:S0326 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--35c67a18-7e8d-4bd5-9fe1-35b1ac3f401f

Wandera-RedDrop

ATTACK:mobile:S0290 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--42ae42eb-ea75-457a-bf39-4ea04304dd0b

Gooligan Citation

ATTACK:mobile:S0291 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4454a696-7619-40ee-971b-cbf646e4ee61

Lookout-EnterpriseApps

ATTACK:mobile:S0440 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4de3f794-63df-4f9e-8bd8-59796d91aa36

CheckPoint Agent Smith

ATTACK:mobile:S0303 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5a6df1dd-9aa4-4f67-9195-8c3a9f5c0f7a

Tripwire-MazarBOT

ATTACK:mobile:S0293 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6086e1e2-1b39-4ff2-910e-4a4eb86d57b7

Lookout-BrainTest

ATTACK:mobile:S0419 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a04ae7d7-1500-49c9-bada-1a75a8670f5c

CheckPoint SimBad 2019

ATTACK:mobile:S0321 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b263e4e9-972d-4ba7-8be8-e55eb6a483c0

ArsTechnica-HummingWhale

ATTACK:mobile:S0432 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b7a31a11-6c84-4c28-a548-4751e4d71134

Google Bread

ATTACK:mobile:S0494 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ce51f1b3-7813-4517-bbcf-7ae8abf6d2ef

Google Security Zen

ATTACK:mobile:S1103 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e3009db5-d1d8-4869-b1ca-d408a052bb4e

checkpoint_flixonline_0421

ATTACK:mobile:S0424 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eef8fb1f-3e8c-44d7-b0d1-1fbad81e392f

Kaspersky Triada June 2016 · Google Triada June 2019

ATTACK:mobile:S0322 → uses → ATTACK:mobile:T1643

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f947d845-4d70-41f3-ae3c-18ea8b44e667

ArsTechnica-HummingBad

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.