Data Destruction

Technique · ATTACK:mobile:T1662

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:T1662",
  "title": "Data Destruction",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1662",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--9ef14445-6f35-4ed0-a042-5024f13a9242",
  "external_id": "T1662",
  "domain": "mobile",
  "created": "2023-09-22T19:09:15.698Z",
  "modified": "2026-05-12T15:12:00.706Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [
    "impact"
  ],
  "source_references": [
    {
      "source_name": "rootnik_rooting_tool",
      "url": "https://unit42.paloaltonetworks.com/rootnik-android-trojan-abuses-commercial-rooting-tool-and-steals-private-information/"
    },
    {
      "source_name": "abuse_native_linux_tools",
      "url": "https://www.trendmicro.com/en_za/research/22/i/how-malicious-actors-abuse-native-linux-tools-in-their-attacks.html"
    }
  ]
}

Explicit source assertions (5)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.