MITRE ATT&CKsoftware (malware)
S0443 MESSAGETAP
- Domain
- enterprise
- Platforms
- Linux
- Version
- 1.0
- Created
- 2020-05-11
Description
MESSAGETAP is a data mining malware family deployed by APT41 into telecommunications networks to monitor and save SMS traffic from specific phone numbers, IMSI numbers, or that contain specific keywords.
Related
Uses · MITRE ATT&CK (8)
- T1074.001 Local Data Staging sub-technique
- T1560.003 Archive via Custom Method sub-technique
- T1070.004 File Deletion sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1040 Network Sniffing technique
- T1049 System Network Connections Discovery technique
- T1083 File and Directory Discovery technique
- T1119 Automated Collection technique
Referenced by MITRE ATT&CK · uses (1)
- G0096 APT41 group
References
- https://www.fireeye.com/blog/threat-research/2019/10/messagetap-who-is-reading-your-text-messages.html FireEye MESSAGETAP October 2019