MITRE ATT&CKsoftware (malware)

S0482 Bundlore

Published 2020-07-01 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
macOS
Aliases
OSX.Bundlore
Version
1.1
Created
2020-07-01

Description

Bundlore is adware written for macOS that has been in use since at least 2015. Though categorized as adware, Bundlore has many features associated with more traditional backdoors.

Related

Uses · MITRE ATT&CK (23)

  • T1685 Disable or Modify Tools technique
  • T1176.001 Browser Extensions sub-technique
  • T1098.004 SSH Authorized Keys sub-technique
  • T1059.007 JavaScript sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.002 AppleScript sub-technique
  • T1059.004 Unix Shell sub-technique
  • T1059.006 Python sub-technique
  • T1564 Hide Artifacts technique
  • T1056.002 GUI Input Capture sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1222.002 Linux and Mac Permissions sub-technique
  • T1543.001 Launch Agent sub-technique
  • T1543.004 Launch Daemon sub-technique
  • T1518 Software Discovery technique
  • T1189 Drive-by Compromise technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1027 Obfuscated Files or Information technique
  • T1048 Exfiltration Over Alternative Protocol technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1105 Ingress Tool Transfer technique

References