MITRE ATT&CKtechnique

T1544 Ingress Tool Transfer

Published 2020-01-21 Modified 2026-05-12 Official page ↗
Domain
mobile
Tactics
Command And Control
Platforms
Android, iOS
Version
2.2
Created
2020-01-21

Description

Adversaries may transfer tools or other files from an external system onto a compromised device to facilitate follow-on actions. Files may be copied from an external adversary-controlled system through the command and control channel or through alternate protocols with another tool such as FTP.

Related

Tactic · MITRE ATT&CK (1)

  • TA0037 Command and Control tactic

Referenced by MITRE ATT&CK · uses (17)

  • S9005 DocSwap software (malware)
  • S1231 GodFather software (malware)
  • S1225 CherryBlos software (malware)
  • C0054 Operation Triangulation campaign
  • S1216 TriangleDB software (malware)
  • S1185 LightSpy software (malware)
  • C0033 C0033 campaign
  • S1126 Phenakite software (malware)
  • S1195 SpyC23 software (malware)
  • S1083 Chameleon software (malware)
  • S1082 Sunbird software (malware)
  • S1061 AbstractEmu software (malware)
  • S1055 SharkBot software (malware)
  • S0485 Mandrake software (malware)
  • S0418 ViceLeaker software (malware)
  • S0407 Monokle software (malware)
  • S0326 RedDrop software (malware)