T1629.003 Disable or Modify Tools
sub-techniqueMobileAdversaries may disable security tools to avoid potential detection of their tools and activities. This can take the form of disabling security software, modifying SELinux configuration, or other methods to interfere with security tools scanning or reporting information. This is typically done by abusing device administrator permissions or using system exploits to gain root access to the device to modify protected system files.
01
platforms
Platforms this applies to.
Android
02
sub-technique of
The broader entity this sits under.
03
mitigations
ATT&CK mitigations that reduce this.
04
detected by (3)
Data components that detect this.
05
software (12)
Malware and tools associated with this.
06
campaigns (1)
Campaigns that use this.
07
source
Where this definition is published.