S0427 TrickMo

malwareMobile

platformsAndroid

also known asTrickMo

TrickMo a 2FA bypass mobile banking trojan, most likely being distributed by TrickBot. TrickMo has been primarily targeting users located in Germany. TrickMo is designed to steal transaction authorization numbers (TANs), which are typically used as one-time passwords.

techniques used (17)

ATT&CK techniques this enables or maps to.

T1406Obfuscated Files or Information
T1418Software Discovery
T1422System Network Configuration Discovery
T1422.001Internet Connection Discovery
T1422.002Wi-Fi Discovery
T1426System Information Discovery
T1437.001Web Protocols
T1513Screen Capture
T1516Input Injection
T1533Data from Local System
T1582SMS Control
T1624.001Broadcast Receivers
T1629.002Device Lockout
T1630.001Uninstall Malicious Application
T1633.001System Checks
T1636.004SMS Messages
T1644Out of Band Data

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan