| mobile |
T1433 |
Access Call Log |
Tiktok Pro can collect the device’s call logs. |
| mobile |
T1432 |
Access Contact List |
Tiktok Pro can access the device’s contact list. |
| mobile |
T1418 |
Application Discovery |
Tiktok Pro can obtain a list of installed applications. |
| mobile |
T1402 |
Broadcast Receivers |
Tiktok Pro has registered for device boot, incoming, and outgoing calls broadcast intents. |
| mobile |
T1429 |
Capture Audio |
Tiktok Pro can capture audio from the device’s microphone and can record phone calls. |
| mobile |
T1512 |
Capture Camera |
Tiktok Pro can capture photos and videos from the device’s camera. |
| mobile |
T1412 |
Capture SMS Messages |
Tiktok Pro can collect SMS messages from the device. |
| mobile |
T1605 |
Command-Line Interface |
Tiktok Pro can execute commands . |
| mobile |
T1533 |
Data from Local System |
Tiktok Pro can collect device photos and credentials from other applications. |
| mobile |
T1447 |
Delete Device Data |
Tiktok Pro can delete attacker-specified files. |
| mobile |
T1476 |
Deliver Malicious App via Other Means |
Tiktok Pro has been distributed via direct download on 3rd party websites, with the link sent in phishing SMS messsages. |
| mobile |
T1420 |
File and Directory Discovery |
Tiktok Pro can list all hidden files in the /DCIM/.dat/ directory. |
| mobile |
T1541 |
Foreground Persistence |
Tiktok Pro has shown a persistent notification to maintain access to device sensors. |
| mobile |
T1411 |
Input Prompt |
Tiktok Pro can launch a fake Facebook login page. |
| mobile |
T1430 |
Location Tracking |
Tiktok Pro can track the device’s location. |
| mobile |
T1444 |
Masquerade as Legitimate Application |
Tiktok Pro has masqueraded as TikTok. |
| mobile |
T1603 |
Scheduled Task/Job |
Tiktok Pro has contained an alarm that triggers every three minutes and timers for communicating with the C2. |
| mobile |
T1513 |
Screen Capture |
Tiktok Pro can take screenshots. |
| mobile |
T1582 |
SMS Control |
Tiktok Pro can send SMS messages. |
| mobile |
T1508 |
Suppress Application Icon |
Tiktok Pro can hide its icon after launch. |
| mobile |
T1426 |
System Information Discovery |
Tiktok Pro can check the device’s battery status. |