S0315 DualToy
DualToy is Windows malware that installs malicious applications onto Android and iOS devices connected over USB. 1
| Item | Value |
|---|---|
| ID | S0315 |
| Type | MALWARE |
| Version | 1.0 |
| Created | 25 October 2017 |
| Last Modified | 24 October 2022 |
| Navigation Layer | View In ATT&CK® Navigator |
Techniques Used
| Domain | ID | Name | Use |
|---|---|---|---|
| mobile | T1458 | Replication Through Removable Media | DualToy side loads malicious or risky apps to both Android and iOS devices via a USB connection.1 |
| mobile | T1422 | System Network Configuration Discovery | DualToy collects the connected iOS device’s information including IMEI, IMSI, ICCID, serial number and phone number.1 |