T1636.005 Accounts
sub-techniqueMobileAdversaries may utilize standard operating system APIs to gather account data. On Android, this can be accomplished by using the AccountManager API. For example, adversaries may use the `getAccounts()` method to list all accounts. On iOS, this can be accomplished by using the Keychain services. If the device has been jailbroken or rooted, adversaries may be able to access Accounts without the users’ knowledge or approval.
01
platforms
Platforms this applies to.
AndroidiOS
02
sub-technique of
The broader entity this sits under.
03
mitigations
ATT&CK mitigations that reduce this.
04
detected by (5)
Data components that detect this.
05
software (4)
Malware and tools associated with this.
06
source
Where this definition is published.