S1054 Drinik

malwareMobile

platformsAndroid

also known asDrinik

Drinik is an evolving Android banking trojan that was observed targeting customers of around 27 banks in India in August 2021. Initially seen as an SMS stealer in 2016, Drinik resurfaced as a banking trojan with more advanced capabilities included in subsequent versions between September 2021 and August 2022.

techniques used (14)

ATT&CK techniques this enables or maps to.

T1406Obfuscated Files or Information
T1417.001Keylogging
T1417.002GUI Input Capture
T1437Application Layer Protocol
T1513Screen Capture
T1533Data from Local System
T1541Foreground Persistence
T1582SMS Control
T1616Call Control
T1628.001Suppress Application Icon
T1629.003Disable or Modify Tools
T1636.002Call Log
T1636.004SMS Messages
T1646Exfiltration Over C2 Channel

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan