MITRE ATT&CKsoftware (malware)
S0440 Agent Smith
- Domain
- mobile
- Platforms
- Android
- Version
- 1.0
- Created
- 2020-05-07
Description
Agent Smith is mobile malware that generates financial gain by replacing legitimate applications on devices with malicious versions that include fraudulent ads. As of July 2019 Agent Smith had infected around 25 million devices, primarily targeting India though effects had been observed in other Asian countries as well as Saudi Arabia, the United Kingdom, and the United States.
Related
Uses · MITRE ATT&CK (10)
- T1655.001 Match Legitimate Name or Location sub-technique
- T1643 Generate Traffic from Victim technique
- T1406.001 Steganography sub-technique
- T1628.001 Suppress Application Icon sub-technique
- T1630.002 File Deletion sub-technique
- T1577 Compromise Application Executable technique
- T1476 Deliver Malicious Application via Other Means technique
- T1404 Exploitation for Privilege Escalation technique
- T1418 Software Discovery technique
- T1424 Process Discovery technique
References
- https://research.checkpoint.com/2019/agent-smith-a-new-species-of-mobile-malware/ CheckPoint Agent Smith