MITRE ATT&CKsoftware (malware)
S0478 EventBot
- Domain
- mobile
- Platforms
- Android
- Version
- 1.0
- Created
- 2020-06-26
Description
EventBot is an Android banking trojan and information stealer that abuses Android’s accessibility service to steal data from various applications. EventBot was designed to target over 200 different banking and financial applications, the majority of which are European bank and cryptocurrency exchange applications.
Related
Uses · MITRE ATT&CK (14)
- T1422.001 Internet Connection Discovery sub-technique
- T1655.001 Match Legitimate Name or Location sub-technique
- T1417.001 Keylogging sub-technique
- T1417.002 GUI Input Capture sub-technique
- T1521.001 Symmetric Cryptography sub-technique
- T1437.001 Web Protocols sub-technique
- T1636.004 SMS Messages sub-technique
- T1624.001 Broadcast Receivers sub-technique
- T1513 Screen Capture technique
- T1406 Obfuscated Files or Information technique
- T1407 Download New Code at Runtime technique
- T1418 Software Discovery technique
- T1422 System Network Configuration Discovery technique
- T1426 System Information Discovery technique
References
- https://www.cybereason.com/blog/eventbot-a-new-mobile-banking-trojan-is-born Cybereason EventBot