MITRE ATT&CKsoftware (malware)
S0529 CarbonSteal
- Domain
- mobile
- Platforms
- Android
- Version
- 1.1
- Created
- 2020-11-10
Description
CarbonSteal is one of a family of four surveillanceware tools that share a common C2 infrastructure. CarbonSteal primarily deals with audio surveillance.
Related
Uses · MITRE ATT&CK (17)
- T1422.001 Internet Connection Discovery sub-technique
- T1655.001 Match Legitimate Name or Location sub-technique
- T1644 Out of Band Data technique
- T1521.002 Asymmetric Cryptography sub-technique
- T1636.004 SMS Messages sub-technique
- T1630.002 File Deletion sub-technique
- T1616 Call Control technique
- T1575 Native API technique
- T1406 Obfuscated Files or Information technique
- T1407 Download New Code at Runtime technique
- T1409 Stored Application Data technique
- T1418 Software Discovery technique
- T1420 File and Directory Discovery technique
- T1422 System Network Configuration Discovery technique
- T1426 System Information Discovery technique
- T1429 Audio Capture technique
- T1430 Location Tracking technique
References
- https://www.lookout.com/documents/threat-reports/us/lookout-uyghur-malware-tr-us.pdf Lookout Uyghur Campaign