Fake Apps Read SMS Codes to Trigger WAP, Carrier Bill
Tags
cmtmf-attack-pattern: Obfuscated Files Or Information Suppress Application Icon
attack-pattern: Data Broadcast Receivers - T1402 Application Layer Protocol - T1437 Deliver Malicious App Via Authorized App Store - T1475 Exploits - T1587.004 Exploits - T1588.005 Generate Fraudulent Advertising Revenue - T1472 Malware - T1587.001 Malware - T1588.001 Obfuscated Files Or Information - T1406 Screen Capture - T1513 Software - T1592.002 Suppress Application Icon - T1628.001 Suppress Application Icon - T1508 Vulnerabilities - T1588.006 Upload Malware - T1608.001 Standard Application Layer Protocol - T1071 Obfuscated Files Or Information - T1027 Screen Capture - T1113 Screen Capture Standard Application Layer Protocol
Show in Graph
Common Information
Type Value
UUID 78b021ee-1a7f-4bb1-a698-67ff1ab7cae5
Fingerprint 9f348d1088b2a3eb
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 7, 2019, midnight
Added to db Oct. 15, 2024, 5:30 p.m.
Last updated Nov. 7, 2024, 2:09 a.m.
Headline Fake Apps Read SMS Codes to Trigger WAP, Carrier Bill
Title Fake Apps Read SMS Codes to Trigger WAP, Carrier Bill
Detected Hints/Tags/Attributes 57/2/6
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_ca/research/19/k/49-disguised-adware-apps-with-optimized-evasion-features-found-on-google-play.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details MITRE ATT&CK Techniques 9 
T1475
Details MITRE ATT&CK Techniques 16 
T1402
Details MITRE ATT&CK Techniques 19 
T1406
Details MITRE ATT&CK Techniques 6 
T1508
Details MITRE ATT&CK Techniques 2 
T1472
Details MITRE ATT&CK Techniques 13 
T1437