Skip to content

S0558 Tiktok Pro

Tiktok Pro is spyware that has been masquerading as the TikTok application.1

Item Value
ID S0558
Associated Names
Type MALWARE
Version 1.0
Created 05 January 2021
Last Modified 19 April 2021
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
mobile T1433 Access Call Log Tiktok Pro can collect the device’s call logs.1
mobile T1432 Access Contact List Tiktok Pro can access the device’s contact list.1
mobile T1418 Application Discovery Tiktok Pro can obtain a list of installed applications.1
mobile T1402 Broadcast Receivers Tiktok Pro has registered for device boot, incoming, and outgoing calls broadcast intents.1
mobile T1429 Capture Audio Tiktok Pro can capture audio from the device’s microphone and can record phone calls.1
mobile T1512 Capture Camera Tiktok Pro can capture photos and videos from the device’s camera.1
mobile T1412 Capture SMS Messages Tiktok Pro can collect SMS messages from the device.1
mobile T1605 Command-Line Interface Tiktok Pro can execute commands .1
mobile T1533 Data from Local System Tiktok Pro can collect device photos and credentials from other applications.1
mobile T1447 Delete Device Data Tiktok Pro can delete attacker-specified files.1
mobile T1476 Deliver Malicious App via Other Means Tiktok Pro has been distributed via direct download on 3rd party websites, with the link sent in phishing SMS messsages.1
mobile T1420 File and Directory Discovery Tiktok Pro can list all hidden files in the /DCIM/.dat/ directory.1
mobile T1541 Foreground Persistence Tiktok Pro has shown a persistent notification to maintain access to device sensors.1
mobile T1411 Input Prompt Tiktok Pro can launch a fake Facebook login page.1
mobile T1430 Location Tracking Tiktok Pro can track the device’s location.1
mobile T1444 Masquerade as Legitimate Application Tiktok Pro has masqueraded as TikTok.1
mobile T1603 Scheduled Task/Job Tiktok Pro has contained an alarm that triggers every three minutes and timers for communicating with the C2.1
mobile T1513 Screen Capture Tiktok Pro can take screenshots.1
mobile T1582 SMS Control Tiktok Pro can send SMS messages.1
mobile T1508 Suppress Application Icon Tiktok Pro can hide its icon after launch.1
mobile T1426 System Information Discovery Tiktok Pro can check the device’s battery status.1

References

Back to top