MITRE ATT&CKtechnique
T1643 Generate Traffic from Victim
- Domain
- mobile
- Tactics
- Impact
- Platforms
- Android, iOS
- Version
- 1.1
- Created
- 2022-04-06
Description
Adversaries may generate outbound traffic from devices. This is typically performed to manipulate external outcomes, such as to achieve carrier billing fraud or to manipulate app store rankings or ratings. Outbound traffic is typically generated as SMS messages or general web traffic, but may take other forms as well.
If done via SMS messages, Android apps must hold the `SEND_SMS` permission. Additionally, sending an SMS message requires user consent if the recipient is a premium number. Applications cannot send SMS messages on iOS
Related
Tactic · MITRE ATT&CK (1)
- TA0034 Impact tactic
Referenced by MITRE ATT&CK · mitigates (1)
- M1011 User Guidance mitigation
Referenced by MITRE ATT&CK · uses (16)
- S1103 FlixOnline software (malware)
- S0545 TERRACOTTA software (malware)
- S0525 Android/AdDisplay.Ashas software (malware)
- S0494 Zen software (malware)
- S0440 Agent Smith software (malware)
- S0432 Bread software (malware)
- S0419 SimBad software (malware)
- S0424 Triada software (malware)
- S0325 Judy software (malware)
- S0326 RedDrop software (malware)
- S0290 Gooligan software (malware)
- S0291 PJApps software (malware)
- S0293 BrainTest software (malware)
- S0303 MazarBOT software (malware)
- S0321 HummingWhale software (malware)
- S0322 HummingBad software (malware)
References
- https://pages.nist.gov/mobile-threat-catalogue/application-threats/APP-16.html NIST Mobile Threat Catalogue