S0440 Agent Smith

malwareMobile

platformsAndroid

also known asAgent Smith

Agent Smith is mobile malware that generates financial gain by replacing legitimate applications on devices with malicious versions that include fraudulent ads. As of July 2019 Agent Smith had infected around 25 million devices, primarily targeting India though effects had been observed in other Asian countries as well as Saudi Arabia, the United Kingdom, and the United States.

techniques used (10)

ATT&CK techniques this enables or maps to.

T1404Exploitation for Privilege Escalation
T1406.001Steganography
T1418Software Discovery
T1424Process Discovery
T1476Deliver Malicious Application via Other Means
T1577Compromise Application Executable
T1628.001Suppress Application Icon
T1630.002File Deletion
T1643Generate Traffic from Victim
T1655.001Match Legitimate Name or Location

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan