MITRE ATT&CKsoftware (malware)
S0420 Dvmap
- Domain
- mobile
- Platforms
- Android
- Version
- 1.0
- Created
- 2019-12-10
Description
Dvmap is rooting malware that injects malicious code into system runtime libraries. It is credited with being the first malware that performs this type of code injection.
Related
Uses · MITRE ATT&CK (7)
- T1629.003 Disable or Modify Tools sub-technique
- T1625.001 System Runtime API Hijacking sub-technique
- T1632.001 Code Signing Policy Modification sub-technique
- T1404 Exploitation for Privilege Escalation technique
- T1406 Obfuscated Files or Information technique
- T1407 Download New Code at Runtime technique
- T1426 System Information Discovery technique
References
- https://securelist.com/dvmap-the-first-android-malware-with-code-injection/78648/ SecureList DVMap June 2017