Skip to content

S0315 DualToy

DualToy is Windows malware that installs malicious applications onto Android and iOS devices connected over USB. 1

Item Value
ID S0315
Version 1.0
Created 25 October 2017
Last Modified 24 October 2022
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
mobile T1458 Replication Through Removable Media DualToy side loads malicious or risky apps to both Android and iOS devices via a USB connection.1
mobile T1422 System Network Configuration Discovery DualToy collects the connected iOS device’s information including IMEI, IMSI, ICCID, serial number and phone number.1