T1628.003 Conceal Multimedia Files

sub-techniqueMobile

Adversaries may attempt to hide multimedia files from the user. By doing so, adversaries may conceal captured files, such as pictures, videos and/or screenshots, then later exfiltrate those files. Specific to Android devices, if the `.nomedia` file is present in a folder, multimedia files in that folder will not be visible to the user in the Gallery application. Additionally, other applications are asked not to scan the folder with the `.nomedia` file, effectively making the folder appear invisible to the user. This technique is often used by stalkerware and spyware applications.

01

platforms

Platforms this applies to.

Android
02

sub-technique of

The broader entity this sits under.

03

mitigations

ATT&CK mitigations that reduce this.

04

groups (1)

Threat groups associated with this.

05

source

Where this definition is published.