MITRE ATT&CKsoftware (malware)

S0290 Gooligan

Published 2017-10-25 Modified 2025-04-25 Official page ↗
Domain
mobile
Platforms
Android
Aliases
Ghost Push
Version
1.2
Created
2017-10-25

Description

Gooligan is a malware family that runs privilege escalation exploits on Android devices and then uses its escalated privileges to steal authentication tokens that can be used to access data from many Google applications. Gooligan has been described as part of the Ghost Push Android malware family.

Related

Uses · MITRE ATT&CK (3)

  • T1643 Generate Traffic from Victim technique
  • T1533 Data from Local System technique
  • T1404 Exploitation for Privilege Escalation technique

References