MITRE ATT&CKsoftware (malware)

S1067 FluBot

Published 2023-02-28 Modified 2025-03-27 Official page ↗
Domain
mobile
Platforms
Android
Version
1.1
Created
2023-02-28

Description

FluBot is a multi-purpose mobile banking malware that was first observed in Spain in late 2020. It primarily spread through European countries using a variety of SMS phishing messages in multiple languages. An international law enforcement operation of 11 countries eventually disrupted the spread of FluBot.

Related

Uses · MITRE ATT&CK (17)

  • T1660 Phishing technique
  • T1628.002 User Evasion sub-technique
  • T1417.002 GUI Input Capture sub-technique
  • T1521.002 Asymmetric Cryptography sub-technique
  • T1637.001 Domain Generation Algorithms sub-technique
  • T1437.001 Web Protocols sub-technique
  • T1629.001 Prevent Application Removal sub-technique
  • T1629.003 Disable or Modify Tools sub-technique
  • T1636.003 Contact List sub-technique
  • T1636.004 SMS Messages sub-technique
  • T1646 Exfiltration Over C2 Channel technique
  • T1604 Proxy Through Victim technique
  • T1582 SMS Control technique
  • T1517 Access Notifications technique
  • T1406 Obfuscated Files or Information technique
  • T1409 Stored Application Data technique
  • T1453 Abuse Accessibility Features technique

References