MITRE ATT&CKtactic

TA0028 Persistence

Published 2018-10-17 Modified 2025-04-25 Official page ↗
Domain
mobile
Version
1.0
Created
2018-10-17

Description

The adversary is trying to maintain their foothold. Persistence is any access, action, or configuration change to a mobile device that gives an attacker a persistent presence on the device. Attackers often will need to maintain access to mobile devices through interruptions such as device reboots and potentially even factory data resets.

Related

Referenced by MITRE ATT&CK · tactic (10)

  • T1676 Linked Devices technique
  • T1624 Event Triggered Execution technique
  • T1624.001 Broadcast Receivers sub-technique
  • T1625 Hijack Execution Flow technique
  • T1625.001 System Runtime API Hijacking sub-technique
  • T1645 Compromise Client Software Binary technique
  • T1603 Scheduled Task/Job technique
  • T1577 Compromise Application Executable technique
  • T1541 Foreground Persistence technique
  • T1398 Boot or Logon Initialization Scripts technique