T1636.002 Call Log

sub-techniqueMobile

Adversaries may utilize standard operating system APIs to gather call log data. On Android, this can be accomplished using the Call Log Content Provider. iOS provides no standard API to access the call log. If the device has been jailbroken or rooted, an adversary may be able to access the Call Log without the user’s knowledge or approval.

01

platforms

Platforms this applies to.

AndroidiOS
02

sub-technique of

The broader entity this sits under.

03

mitigations

ATT&CK mitigations that reduce this.

05

software (40)

Malware and tools associated with this.

06

campaigns (1)

Campaigns that use this.

07

source

Where this definition is published.