S0311 YiSpecter

malwareMobile

platformsAndroid · iOS

also known asYiSpecter

YiSpecter is a family of iOS and Android malware, first detected in November 2014, targeting users in mainland China and Taiwan. YiSpecter abuses private APIs in iOS to infect both jailbroken and non-jailbroken devices.

techniques used (13)

ATT&CK techniques this enables or maps to.

T1407Download New Code at Runtime
T1409Stored Application Data
T1418Software Discovery
T1422System Network Configuration Discovery
T1424Process Discovery
T1426System Information Discovery
T1437.001Web Protocols
T1456Drive-By Compromise
T1476Deliver Malicious Application via Other Means
T1577Compromise Application Executable
T1625Hijack Execution Flow
T1628.001Suppress Application Icon
T1632.001Code Signing Policy Modification

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan