MITRE ATT&CKsoftware (malware)
S1054 Drinik
- Domain
- mobile
- Platforms
- Android
- Version
- 1.0
- Created
- 2023-01-18
Description
Drinik is an evolving Android banking trojan that was observed targeting customers of around 27 banks in India in August 2021. Initially seen as an SMS stealer in 2016, Drinik resurfaced as a banking trojan with more advanced capabilities included in subsequent versions between September 2021 and August 2022.
Related
Uses · MITRE ATT&CK (14)
- T1417.001 Keylogging sub-technique
- T1417.002 GUI Input Capture sub-technique
- T1629.003 Disable or Modify Tools sub-technique
- T1636.002 Call Log sub-technique
- T1636.004 SMS Messages sub-technique
- T1646 Exfiltration Over C2 Channel technique
- T1628.001 Suppress Application Icon sub-technique
- T1616 Call Control technique
- T1582 SMS Control technique
- T1541 Foreground Persistence technique
- T1533 Data from Local System technique
- T1513 Screen Capture technique
- T1406 Obfuscated Files or Information technique
- T1437 Application Layer Protocol technique