MITRE ATT&CKsub-technique

T1636.002 Call Log

Published 2022-04-01 Modified 2026-05-12 Official page ↗
Domain
mobile
Tactics
Collection
Platforms
Android, iOS
Version
1.1
Created
2022-04-01

Description

Adversaries may utilize standard operating system APIs to gather call log data. On Android, this can be accomplished using the Call Log Content Provider. iOS provides no standard API to access the call log. If the device has been jailbroken or rooted, an adversary may be able to access the Call Log without the user’s knowledge or approval.

Related

Subtechnique of · MITRE ATT&CK (1)

  • T1636 Protected User Data technique

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · mitigates (1)

  • M1011 User Guidance mitigation

Referenced by MITRE ATT&CK · uses (41)

  • S9006 VajraSpy software (malware)
  • S9005 DocSwap software (malware)
  • S1243 DCHSpy software (malware)
  • S1241 RatMilad software (malware)
  • S1185 LightSpy software (malware)
  • C0033 C0033 campaign
  • S1195 SpyC23 software (malware)
  • S1095 AhRat software (malware)
  • S1092 Escobar software (malware)
  • S1082 Sunbird software (malware)
  • S1079 BOULDSPY software (malware)
  • S1080 Fakecalls software (malware)
  • S1077 Hornbill software (malware)
  • S1069 TangleBot software (malware)
  • S1061 AbstractEmu software (malware)
  • S1054 Drinik software (malware)
  • S0558 Tiktok Pro software (malware)
  • S0549 SilkBean software (malware)
  • S0550 DoubleAgent software (malware)
  • S0551 GoldenEagle software (malware)
  • S0544 HenBox software (malware)
  • S0539 Red Alert 2.0 software (malware)
  • S0506 ViperRAT software (malware)
  • S0489 WolfRAT software (malware)
  • S0463 INSOMNIA software (malware)
  • S0425 Corona Updates software (malware)
  • S0421 GolfSpy software (malware)
  • S0418 ViceLeaker software (malware)
  • S0407 Monokle software (malware)
  • S0405 Exodus software (malware)
Show all 41 ›

References