MITRE ATT&CKtechnique

T1426 System Information Discovery

Published 2017-10-25 Modified 2026-05-12 Official page ↗
Domain
mobile
Tactics
Discovery
Platforms
Android, iOS
Version
1.2
Created
2017-10-25

Description

Adversaries may attempt to get detailed information about a device’s operating system and hardware, including versions, patches, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not to fully infects the target and/or attempts specific actions. On Android, much of this information is programmatically accessible to applications through the `android.os.Build` class. iOS is much more restrictive with what information is visible to applications. Typically, applications will only be able to query the device model and which version of iOS it is running.

Related

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · uses (58)

  • S9006 VajraSpy software (malware)
  • S9005 DocSwap software (malware)
  • S1241 RatMilad software (malware)
  • S1231 GodFather software (malware)
  • C0054 Operation Triangulation campaign
  • S1185 LightSpy software (malware)
  • C0033 C0033 campaign
  • S1126 Phenakite software (malware)
  • S1094 BRATA software (malware)
  • S1095 AhRat software (malware)
  • S1083 Chameleon software (malware)
  • S1082 Sunbird software (malware)
  • S1079 BOULDSPY software (malware)
  • S1077 Hornbill software (malware)
  • S1061 AbstractEmu software (malware)
  • S1062 S.O.V.A. software (malware)
  • S1056 TianySpy software (malware)
  • S0577 FrozenCell software (malware)
  • S0558 Tiktok Pro software (malware)
  • S0555 CHEMISTGAMES software (malware)
  • S0550 DoubleAgent software (malware)
  • S0551 GoldenEagle software (malware)
  • S0544 HenBox software (malware)
  • S0540 Asacub software (malware)
  • S0536 GPlayed software (malware)
  • S0535 Golden Cup software (malware)
  • S0529 CarbonSteal software (malware)
  • S0522 Exobot software (malware)
  • S0525 Android/AdDisplay.Ashas software (malware)
  • S0509 FakeSpy software (malware)
Show all 58 ›

References