S0655 BusyGasper

malwareMobile

platformsAndroid

also known asBusyGasper

BusyGasper is Android spyware that has been in use since May 2016. There have been less than 10 victims, all who appear to be located in Russia, that were all infected via physical access to the device.

techniques used (18)

ATT&CK techniques this enables or maps to.

T1407Download New Code at Runtime
T1409Stored Application Data
T1417.001Keylogging
T1429Audio Capture
T1430Location Tracking
T1481.002Bidirectional Communication
T1512Video Capture
T1513Screen Capture
T1533Data from Local System
T1582SMS Control
T1616Call Control
T1623.001Unix Shell
T1628.001Suppress Application Icon
T1628.002User Evasion
T1636.004SMS Messages
T1639.001Exfiltration Over Unencrypted Non-C2 Protocol
T1644Out of Band Data
T1645Compromise Client Software Binary

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan