S0577 FrozenCell

malwareMobile

platformsAndroid

also known asFrozenCell

FrozenCell is the mobile component of a family of surveillanceware, with a corresponding desktop component known as KasperAgent and Micropsia. There are multiple close variants of FrozenCell, such as VAMP, GnatSpy, Desert Scorpion and SpyC23, which add some additional functionality but are not significantly different from the original malware.

techniques used (11)

ATT&CK techniques this enables or maps to.

T1407Download New Code at Runtime
T1409Stored Application Data
T1420File and Directory Discovery
T1422System Network Configuration Discovery
T1426System Information Discovery
T1429Audio Capture
T1430Location Tracking
T1532Archive Collected Data
T1533Data from Local System
T1636.004SMS Messages
T1655.001Match Legitimate Name or Location

used by groups (1)

Threat groups associated with this.

G1028APT-C-23

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan