MITRE ATT&CKsub-technique

T1430.001 Remote Device Management Services

Published 2022-04-05 Modified 2025-10-24 Official page ↗

Domain: mobile
Tactics: Collection, Discovery
Platforms: Android, iOS
Version: 1.1
Created: 2022-04-05

Description

An adversary may use access to cloud services (e.g. Google's Android Device Manager or Apple iCloud's Find my iPhone) or to an enterprise mobility management (EMM)/mobile device management (MDM) server console to track the location of mobile devices managed by the service.

Subtechnique of · MITRE ATT&CK (1)

T1430 Location Tracking technique

Tactic · MITRE ATT&CK (2)

TA0032 Discovery tactic
TA0035 Collection tactic

Referenced by MITRE ATT&CK · mitigates (2)

M1011 User Guidance mitigation
M1012 Enterprise Policy mitigation

References

https://krebsonsecurity.com/2018/05/tracking-firm-locationsmart-leaked-location-data-for-customers-of-all-major-u-s-mobile-carriers-in-real-time-via-its-web-site/ Krebs-Location
https://pages.nist.gov/mobile-threat-catalogue/ecosystem-threats/ECO-5.html NIST Mobile Threat Catalogue
https://pages.nist.gov/mobile-threat-catalogue/emm-threats/EMM-7.html NIST Mobile Threat Catalogue