S0302 Twitoor
Twitoor is a dropper application capable of receiving commands from social media.1
| Item | Value |
|---|---|
| ID | S0302 |
| Associated Names | |
| Type | MALWARE |
| Version | 2.0 |
| Created | 25 October 2017 |
| Last Modified | 24 October 2022 |
| Navigation Layer | View In ATT&CK® Navigator |
Techniques Used
| Domain | ID | Name | Use |
|---|---|---|---|
| mobile | T1521 | Encrypted Channel | Twitoor encrypts its C2 communication.1 |
| mobile | T1628 | Hide Artifacts | - |
| mobile | T1628.001 | Suppress Application Icon | Twitoor can hide its presence on the system.1 |
| mobile | T1481 | Web Service | - |
| mobile | T1481.003 | One-Way Communication | Twitoor can be controlled via Twitter.1 |