Skip to content

DET0608 Detection of Generate Traffic from Victim

Item Value
ID DET0608
Version 1.0
Created 21 October 2025
Last Modified 21 October 2025

Technique Detected: T1643 (Generate Traffic from Victim)

Analytics

Android

AN1659

On Android, the user can review which applications can use premium SMS features in the “Special access” page within application settings. Application vetting services can detect when applications request the SEND_SMS permission, which should be infrequently used.

Log Sources
Data Component Name Channel
System Settings (DC0118) User Interface None
Permissions Requests (DC0114) Application Vetting None
Mutable Elements
Field Description

iOS

AN1660

On Android, the user can review which applications can use premium SMS features in the “Special access” page within application settings. Application vetting services can detect when applications request the SEND_SMS permission, which should be infrequently used.

Log Sources
Data Component Name Channel
System Settings (DC0118) User Interface None
Permissions Requests (DC0114) Application Vetting None
Mutable Elements
Field Description