T1636.003 Contact List
sub-techniqueMobileAdversaries may utilize standard operating system APIs to gather contact list data. On Android, this can be accomplished using the Contacts Content Provider. On iOS, this can be accomplished using the `Contacts` framework. If the device has been jailbroken or rooted, an adversary may be able to access the Contact List without the user’s knowledge or approval.
01
platforms
Platforms this applies to.
AndroidiOS
02
sub-technique of
The broader entity this sits under.
03
mitigations
ATT&CK mitigations that reduce this.
04
detected by (3)
Data components that detect this.
05
groups (1)
Threat groups associated with this.
06
software (56)
Malware and tools associated with this.
07
campaigns (1)
Campaigns that use this.
08
source
Where this definition is published.