cti-ATT-CK-v13.1/mobile-attack/malware/malware--366c800f-97a8-48d5-b0a6-79d00198252a.json

{
    "type": "bundle",
    "id": "bundle--24d42bbf-e163-4028-ad39-db9fdc867ae3",
    "spec_version": "2.0",
    "objects": [
        {
            "labels": [
                "malware"
            ],
            "x_mitre_platforms": [
                "Android"
            ],
            "x_mitre_domains": [
                "mobile-attack"
            ],
            "x_mitre_aliases": [
                "Corona Updates",
                "Wabi Music",
                "Concipit1248"
            ],
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "id": "malware--366c800f-97a8-48d5-b0a6-79d00198252a",
            "type": "malware",
            "created": "2020-04-24T15:06:32.870Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "external_references": [
                {
                    "external_id": "S0425",
                    "source_name": "mitre-attack",
                    "url": "https://attack.mitre.org/software/S0425"
                },
                {
                    "source_name": "Wabi Music",
                    "description": "(Citation: TrendMicro Coronavirus Updates)"
                },
                {
                    "source_name": "Concipit1248",
                    "description": "(Citation: TrendMicro Coronavirus Updates)"
                },
                {
                    "source_name": "TrendMicro Coronavirus Updates",
                    "url": "https://blog.trendmicro.com/trendlabs-security-intelligence/coronavirus-update-app-leads-to-project-spy-android-and-ios-spyware/",
                    "description": "T. Bao, J. Lu. (2020, April 14).  Coronavirus Update App Leads to Project Spy Android and iOS Spyware. Retrieved April 24, 2020."
                }
            ],
            "modified": "2020-09-11T15:45:38.235Z",
            "name": "Corona Updates",
            "description": "[Corona Updates](https://attack.mitre.org/software/S0425) is Android spyware that took advantage of the Coronavirus pandemic. The campaign distributing this spyware is tracked as Project Spy. Multiple variants of this spyware have been discovered to have been hosted on the Google Play Store.(Citation: TrendMicro Coronavirus Updates)",
            "x_mitre_version": "1.1",
            "x_mitre_attack_spec_version": "2.1.0",
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5"
        }
    ]
}