T1630 Indicator Removal on Host

Mobile

Adversaries may delete, alter, or hide generated artifacts on a device, including files, jailbreak status, or the malicious application itself. These actions may interfere with event collection, reporting, or other notifications used to detect intrusion activity. This may compromise the integrity of mobile security solutions by causing notable events or information to go unreported.

01

platforms

Platforms this applies to.

iOSAndroid
03

mitigations

ATT&CK mitigations that reduce this.

04

detected by (3)

Data components that detect this.

05

software (2)

Malware and tools associated with this.

06

campaigns (1)

Campaigns that use this.

07

source

Where this definition is published.