T1422.001 Internet Connection Discovery

Unter-TechnikMobile

Adversaries may check for Internet connectivity on compromised systems. This may be performed during automated discovery and can be accomplished in numerous ways such as using `adb shell netstat` for Android. Adversaries may use the results and responses from these requests to determine if the mobile devices are capable of communicating with adversary-owned C2 servers before attempting to connect to them. The results may also be used to identify routes, redirectors, and proxy servers.

01

Plattformen

Plattformen, für die dies gilt.

AndroidiOS
02

Unter-Technik von

Die übergeordnete Entität.

03

Gegenmaßnahmen

ATT&CK-Gegenmaßnahmen, die dies verringern.

04

Erkannt durch (3)

Datenkomponenten, die dies erkennen.

05

Software (19)

Zugehörige Malware und Tools.

06

Quelle

Wo diese Definition veröffentlicht ist.