MITRE ATT&CKsoftware (malware)

S1083 Chameleon

Published 2023-08-16 Modified 2025-10-24 Official page ↗
Domain
mobile
Platforms
Android
Version
2.0
Created
2023-08-16

Description

Chameleon is an Android banking trojan that can leverage Android’s Accessibility Services to perform malicious activities. Believed to have been first active in January 2023, Chameleon has been observed targeting users in Australia and Poland by masquerading as official applications. A new variant of Chameleon has expanded its targets to include Android users in the United Kingdom and Italy.

Related

Uses · MITRE ATT&CK (26)

  • T1660 Phishing technique
  • T1655.001 Match Legitimate Name or Location sub-technique
  • T1417.001 Keylogging sub-technique
  • T1417.002 GUI Input Capture sub-technique
  • T1437.001 Web Protocols sub-technique
  • T1629.001 Prevent Application Removal sub-technique
  • T1629.003 Disable or Modify Tools sub-technique
  • T1636.004 SMS Messages sub-technique
  • T1646 Exfiltration Over C2 Channel technique
  • T1630 Indicator Removal on Host technique
  • T1633.001 System Checks sub-technique
  • T1616 Call Control technique
  • T1603 Scheduled Task/Job technique
  • T1575 Native API technique
  • T1544 Ingress Tool Transfer technique
  • T1533 Data from Local System technique
  • T1517 Access Notifications technique
  • T1513 Screen Capture technique
  • T1509 Non-Standard Port technique
  • T1407 Download New Code at Runtime technique
  • T1418 Software Discovery technique
  • T1426 System Information Discovery technique
  • T1430 Location Tracking technique
  • T1437 Application Layer Protocol technique
  • T1453 Abuse Accessibility Features technique
  • T1461 Lockscreen Bypass technique

References