Skip to content

DET0684 Detection of Phishing

Item Value
ID DET0684
Version 1.0
Created 21 October 2025
Last Modified 21 October 2025

Technique Detected: T1660 (Phishing)

Analytics

Android

AN1791

Mobile security products may provide URL inspection services that could determine if a domain being visited is malicious. Enterprises may be able to detect anomalous traffic originating from mobile devices, which could indicate compromise.

Log Sources
Data Component Name Channel
Network Traffic Content (DC0085) Network Traffic None
Network Traffic Flow (DC0078) Network Traffic None
Mutable Elements
Field Description

iOS

AN1792

Mobile security products may provide URL inspection services that could determine if a domain being visited is malicious. Enterprises may be able to detect anomalous traffic originating from mobile devices, which could indicate compromise.

Log Sources
Data Component Name Channel
Network Traffic Content (DC0085) Network Traffic None
Network Traffic Flow (DC0078) Network Traffic None
Mutable Elements
Field Description