MITRE ATT&CKsoftware (malware)
S0318 XLoader for Android
- Domain
- mobile
- Platforms
- Android
- Version
- 2.0
- Created
- 2018-10-17
Description
XLoader for Android is a malicious Android app first observed targeting Japan, Korea, China, Taiwan, and Hong Kong in 2018. It has more recently been observed targeting South Korean users as a pornography application. It is tracked separately from the XLoader for iOS.
Related
Uses · MITRE ATT&CK (9)
- T1655.001 Match Legitimate Name or Location sub-technique
- T1481.001 Dead Drop Resolver sub-technique
- T1626.001 Device Administrator Permissions sub-technique
- T1636.004 SMS Messages sub-technique
- T1476 Deliver Malicious Application via Other Means technique
- T1406 Obfuscated Files or Information technique
- T1422 System Network Configuration Discovery technique
- T1426 System Information Discovery technique
- T1429 Audio Capture technique
References
- https://blog.trendmicro.com/trendlabs-security-intelligence/new-version-of-xloader-that-disguises-as-android-apps-and-an-ios-profile-holds-new-links-to-fakespy/ TrendMicro-XLoader-FakeSpy
- https://blog.trendmicro.com/trendlabs-security-intelligence/xloader-android-spyware-and-banking-trojan-distributed-via-dns-spoofing/ TrendMicro-XLoader