MITRE ATT&CKtechnique

T1123 Audio Capture

Published 2017-05-31 Modified 2026-05-12 Official page ↗
Domain
enterprise
Tactics
Collection
Platforms
Linux, macOS, Windows
Version
1.0
Created
2017-05-31

Description

An adversary can leverage a computer's peripheral devices (e.g., microphones and webcams) or applications (e.g., voice and video call services) to capture audio recordings for the purpose of listening into sensitive conversations to gather information. Malware or scripts may be used to interact with the devices through an available API provided by the operating system or an application to capture audio. Audio files may be written to disk and exfiltrated later.

Related

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · uses (32)

  • G1055 VOID MANTICORE group
  • S1185 LightSpy software (malware)
  • S1146 MgBot software (malware)
  • S1090 NightClub software (malware)
  • S1016 MacMa software (malware)
  • S0467 TajMahal software (malware)
  • S0454 Cadelspy software (malware)
  • S0438 Attor software (malware)
  • S0434 Imminent Monitor software (tool)
  • S0409 Machete software (malware)
  • S0379 Revenge RAT software (malware)
  • S0332 Remcos software (tool)
  • S0334 DarkComet software (malware)
  • S0336 NanoCore software (malware)
  • S0338 Cobian RAT software (malware)
  • S0339 Micropsia software (malware)
  • S0234 Bandook software (malware)
  • S0240 ROKRAT software (malware)
  • S0257 VERMIN software (malware)
  • S0260 InvisiMole software (malware)
  • S0282 MacSpy software (malware)
  • S0283 jRAT software (malware)
  • G0067 APT37 group
  • S0192 Pupy software (tool)
  • S0194 PowerSploit software (tool)
  • S0213 DOGCALL software (malware)
  • S0152 EvilGrab software (malware)
  • S0163 Janicab software (malware)
  • S0021 Derusbi software (malware)
  • S0098 T9000 software (malware)
Show all 32 ›

Referenced by CAPEC · att&ck technique (1)

  • CAPEC-634 Probe Audio and Video Peripherals attack pattern

References