MESSAGETAP

Malware & Tools · MESSAGETAP

· MalwareS0443 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Linux

Description

MESSAGETAP is a data mining malware family deployed by APT41 into telecommunications networks to monitor and save SMS traffic from specific phone numbers, IMSI numbers, or that contain specific keywords. (Citation: FireEye MESSAGETAP October 2019)

Tactic Coverage

discovery (3)collection (3)stealth (2)credential access (1)

Used By (1 groups)

G0096APT41Wicked Panda, Brass Typhoon

Techniques (8)

T1040Network Sniffing

credential accessdiscovery

T1049System Network Connections Discovery

discovery

T1070.004File Deletion

stealth

T1074.001Local Data Staging

collection

T1083File and Directory Discovery

discovery

T1119Automated Collection

collection

References

https://attack.mitre.org/software/S0443 https://www.fireeye.com/blog/threat-research/2019/10/messagetap-who-is-reading-your-text-messages.html