This is a custom instance of the MITRE ATT&CK Website. The official website can be found at attack.mitre.org.
SOFTWARE
SOFTWARE
A-B
C-D
E-F
G-H
I-J
K-L
M-N
O-P
Q-R
S-T
U-V
W-X
Concipit1248
Concipit1248 is iOS spyware that was discovered using the same name as the developer of the Android spyware Corona Updates. Further investigation revealed that the two pieces of software contained the same C2 URL and similar functionality.[1]
ID: S0426
ⓘ
Associated Software: Corona Updates
ⓘ
Type: MALWARE
ⓘ
Platforms: iOS
Version: 1.0
Created: 24 April 2020
Last Modified: 30 April 2020
Associated Software Descriptions
| Name | Description |
|---|---|
| Corona Updates |
Techniques Used
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Mobile | T1512 | Capture Camera |
Concipit1248 requests permissions to use the device camera.[1] |
|
| Mobile | T1533 | Data from Local System |
Concipit1248 can collect device photos.[1] |
|
| Mobile | T1475 | Deliver Malicious App via Authorized App Store |
Concipit1248 has been distributed through the App Store.[1] |
|
| Mobile | T1437 | Standard Application Layer Protocol |
Concipit1248 communicates with the C2 server using HTTP requests.[1] |
|
References
×