S0290 Gooligan

malwareMobile

platformsAndroid

also known asGooligan · Ghost Push

Gooligan is a malware family that runs privilege escalation exploits on Android devices and then uses its escalated privileges to steal authentication tokens that can be used to access data from many Google applications. Gooligan has been described as part of the Ghost Push Android malware family.

techniques used (3)

ATT&CK techniques this enables or maps to.

T1404Exploitation for Privilege Escalation
T1533Data from Local System
T1643Generate Traffic from Victim

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan