MITRE ATT&CKsoftware (malware)

S1079 BOULDSPY

Published 2023-07-21 Modified 2023-10-20 Official page ↗
Domain
mobile
Platforms
Android
Version
1.0
Created
2023-07-21

Description

BOULDSPY is an Android malware, detected in early 2023, with surveillance and remote-control capabilities. Analysis of exfiltrated C2 data suggests that BOULDSPY primarily targeted minority groups in Iran.

Related

Uses · MITRE ATT&CK (25)

  • T1422.002 Wi-Fi Discovery sub-technique
  • T1422.001 Internet Connection Discovery sub-technique
  • T1655.001 Match Legitimate Name or Location sub-technique
  • T1644 Out of Band Data technique
  • T1417.001 Keylogging sub-technique
  • T1437.001 Web Protocols sub-technique
  • T1636.002 Call Log sub-technique
  • T1636.003 Contact List sub-technique
  • T1636.004 SMS Messages sub-technique
  • T1646 Exfiltration Over C2 Channel technique
  • T1624 Event Triggered Execution technique
  • T1577 Compromise Application Executable technique
  • T1532 Archive Collected Data technique
  • T1533 Data from Local System technique
  • T1512 Video Capture technique
  • T1513 Screen Capture technique
  • T1398 Boot or Logon Initialization Scripts technique
  • T1407 Download New Code at Runtime technique
  • T1409 Stored Application Data technique
  • T1414 Clipboard Data technique
  • T1418 Software Discovery technique
  • T1422 System Network Configuration Discovery technique
  • T1426 System Information Discovery technique
  • T1429 Audio Capture technique
  • T1430 Location Tracking technique

References