MITRE ATT&CKsoftware (malware)
S0577 FrozenCell
- Domain
- mobile
- Platforms
- Android
- Version
- 1.1
- Created
- 2021-02-17
Description
FrozenCell is the mobile component of a family of surveillanceware, with a corresponding desktop component known as KasperAgent and Micropsia.
There are multiple close variants of FrozenCell, such as VAMP, GnatSpy, Desert Scorpion and SpyC23, which add some additional functionality but are not significantly different from the original malware.
Related
Uses · MITRE ATT&CK (11)
- T1655.001 Match Legitimate Name or Location sub-technique
- T1636.004 SMS Messages sub-technique
- T1532 Archive Collected Data technique
- T1533 Data from Local System technique
- T1407 Download New Code at Runtime technique
- T1409 Stored Application Data technique
- T1420 File and Directory Discovery technique
- T1422 System Network Configuration Discovery technique
- T1426 System Information Discovery technique
- T1429 Audio Capture technique
- T1430 Location Tracking technique
Referenced by MITRE ATT&CK · uses (1)
- G1028 APT-C-23 group
References
- https://unit42.paloaltonetworks.com/unit42-targeted-attacks-middle-east-using-kasperagent-micropsia/ Unit42 VAMP 2017
- https://www.trendmicro.com/en_us/research/17/l/new-gnatspy-mobile-malware-family-discovered.html Trendmicro GnatSpy 2017
- https://blog.lookout.com/frozencell-mobile-threat Lookout FrozenCell