MITRE ATT&CKsoftware (malware)

S0479 DEFENSOR ID

Published 2020-06-26 Modified 2025-04-25 Official page ↗
Domain
mobile
Platforms
Android
Version
1.0
Created
2020-06-26

Description

DEFENSOR ID is a banking trojan capable of clearing a victim’s bank account or cryptocurrency wallet and taking over email or social media accounts. DEFENSOR ID performs the majority of its malicious functionality by abusing Android’s accessibility service.

Related

Uses · MITRE ATT&CK (5)

  • T1437.001 Web Protocols sub-technique
  • T1624.001 Broadcast Receivers sub-technique
  • T1516 Input Injection technique
  • T1513 Screen Capture technique
  • T1418 Software Discovery technique

References