T1533 Data from Local System
MobileAdversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to exfiltration. Access to local system data, which includes information stored by the operating system, often requires escalated privileges. Examples of local system data include authentication tokens, the device keyboard cache, Wi-Fi passwords, and photos. On Android, adversaries may also attempt to access files from external storage which may require additional storage-related permissions.
01
platforms
Platforms this applies to.
AndroidiOS
02
detected by (3)
Data components that detect this.
03
groups (1)
Threat groups associated with this.
04
software (52)
Malware and tools associated with this.
05
campaigns (2)
Campaigns that use this.
06
source
Where this definition is published.