T1426 System Information Discovery
MobileAdversaries may attempt to get detailed information about a device’s operating system and hardware, including versions, patches, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not to fully infects the target and/or attempts specific actions. On Android, much of this information is programmatically accessible to applications through the `android.os.Build` class. iOS is much more restrictive with what information is visible to applications. Typically, applications will only be able to query the device model and which version of iOS it is running.
platforms
Platforms this applies to.
detected by (3)
Data components that detect this.
groups (1)
Threat groups associated with this.
software (55)
Malware and tools associated with this.
campaigns (2)
Campaigns that use this.
source
Where this definition is published.