S0544 HenBox

malwareMobile

platformsAndroid

also known asHenBox

HenBox is Android malware that attempts to only execute on Xiaomi devices running the MIUI operating system. HenBox has primarily been used to target Uyghurs, a minority Turkic ethnic group.

techniques used (18)

ATT&CK techniques this enables or maps to.

T1406Obfuscated Files or Information
T1407Download New Code at Runtime
T1418Software Discovery
T1424Process Discovery
T1426System Information Discovery
T1429Audio Capture
T1430Location Tracking
T1476Deliver Malicious Application via Other Means
T1512Video Capture
T1533Data from Local System
T1575Native API
T1623.001Unix Shell
T1624.001Broadcast Receivers
T1633.001System Checks
T1636.002Call Log
T1636.003Contact List
T1636.004SMS Messages
T1655.001Match Legitimate Name or Location

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan