MITRE ATT&CKsoftware (malware)

S1126 Phenakite

Published 2024-03-26 Modified 2024-11-17 Official page ↗

Domain: mobile
Platforms: iOS
Version: 1.0
Created: 2024-03-26

Description

Phenakite is a mobile malware that is used by APT-C-23 to target iOS devices. According to several reports, Phenakite was developed to fill a tooling gap and to target those who owned iPhones instead of Windows desktops or Android phones.

Uses · MITRE ATT&CK (10)

T1655.001 Match Legitimate Name or Location sub-technique
T1636.003 Contact List sub-technique
T1636.004 SMS Messages sub-technique
T1544 Ingress Tool Transfer technique
T1533 Data from Local System technique
T1512 Video Capture technique
T1404 Exploitation for Privilege Escalation technique
T1417 Input Capture technique
T1426 System Information Discovery technique
T1429 Audio Capture technique

Referenced by MITRE ATT&CK · uses (1)

G1028 APT-C-23 group

References

https://web.archive.org/web/20231126111812/https:/about.fb.com/wp-content/uploads/2021/04/Technical-threat-report-Arid-Viper-April-2021.pdf fb_arid_viper
https://web.archive.org/web/20240208234008/www.sentinelone.com/labs/the-israel-hamas-war-cyber-domain-state-sponsored-activity-of-interest/ sentinelone_israel_hamas_war

S1126 Phenakite

Description

Related

Uses · MITRE ATT&CK (10)

Referenced by MITRE ATT&CK · uses (1)

References