John Wunder
53 lines
2.6 KiB
JSON
53 lines
2.6 KiB
JSON
{
|
|
"objects": [
|
|
{
|
|
"name": "Repackaged Application",
|
|
"description": "An adversary could download a legitimate app, disassemble it, add malicious code, and then reassemble the app, for example as described by (Citation: Zhou) and Jiang in (Citation: Zhou). The app would appear to be the original app but contain additional malicious functionality. The adversary could then publish this app to app stores or use another delivery technique.\n\nDetection: An EMM/MDM or mobile threat protection solution can identify the presence of unwanted, known insecure, or malicious apps on devices.\n\nPlatforms: Android, iOS",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "mitre-mobile-attack",
|
|
"phase_name": "app-delivery-via-authorized-app-store"
|
|
},
|
|
{
|
|
"kill_chain_name": "mitre-mobile-attack",
|
|
"phase_name": "app-delivery-via-other-means"
|
|
}
|
|
],
|
|
"external_references": [
|
|
{
|
|
"url": "https://attack.mitre.org/mobile/index.php/Technique/MOB-T1047",
|
|
"source_name": "mitre-mobile-attack",
|
|
"external_id": "MOB-T1047"
|
|
},
|
|
{
|
|
"external_id": "APP-14",
|
|
"source_name": "NIST Mobile Threat Catalogue",
|
|
"url": "https://pages.nist.gov/mobile-threat-catalogue/application-threats/APP-14.html"
|
|
},
|
|
{
|
|
"description": "Yajin Zhou and Xuxian Jiang. (2012, May). Dissecting Android Malware: Characterization and Evolution. Retrieved December 9, 2016.",
|
|
"source_name": "Zhou",
|
|
"url": "http://ieeexplore.ieee.org/document/6234407"
|
|
}
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
|
|
],
|
|
"created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
|
|
"created": "2017-10-25T14:48:35.247Z",
|
|
"x_mitre_platforms": [
|
|
"Android",
|
|
"iOS"
|
|
],
|
|
"x_mitre_tactic_type": [
|
|
"Pre-Adversary Device Access"
|
|
],
|
|
"id": "attack-pattern--a93ccb8f-3996-42e2-b7c7-bb599d4e205f",
|
|
"modified": "2018-04-13T17:05:30.756Z",
|
|
"type": "attack-pattern"
|
|
}
|
|
],
|
|
"type": "bundle",
|
|
"id": "bundle--7aa2a0c7-44db-4090-a646-94a7c2a26b8a",
|
|
"spec_version": "2.0"
|
|
} |