T1426 System Information Discovery

Mobile

Adversaries may attempt to get detailed information about a device’s operating system and hardware, including versions, patches, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not to fully infects the target and/or attempts specific actions. On Android, much of this information is programmatically accessible to applications through the `android.os.Build` class. iOS is much more restrictive with what information is visible to applications. Typically, applications will only be able to query the device model and which version of iOS it is running.

01

platforms

Platforms this applies to.

AndroidiOS
02

detected by (3)

Data components that detect this.

03

groups (1)

Threat groups associated with this.

04

software (55)

Malware and tools associated with this.

05

campaigns (2)

Campaigns that use this.

06

source

Where this definition is published.