Skip to content

S0285 OldBoot

OldBoot is an Android malware family. 1

Item Value
ID S0285
Associated Names
Type MALWARE
Version 1.1
Created 25 October 2017
Last Modified 11 December 2018
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
mobile T1398 Modify OS Kernel or Boot Partition OldBoot uses escalated privileges to modify the init script on the device’s boot partition to maintain persistence.1

References

  1. Sudhir K Bansal. (2014, January 28). First widely distributed Android bootkit Malware infects more than 350,000 Devices. Retrieved December 21, 2016. ↩↩

Back to top