Skip to content

T1464 Network Denial of Service

Adversaries may perform Network Denial of Service (DoS) attacks to degrade or block the availability of targeted resources to users. Network DoS can be performed by exhausting the network bandwidth that services rely on, or by jamming the signal going to or coming from devices.

A Network DoS will occur when an adversary is able to jam radio signals (e.g. Wi-Fi, cellular, GPS) around a device to prevent it from communicating. For example, to jam cellular signal, an adversary may use a handheld signal jammer, which jam devices within the jammer’s operational range.3

Usage of cellular jamming has been documented in several arrests reported in the news.1452

Item Value
ID T1464
Sub-techniques
Tactics TA0034
Platforms Android, iOS
Version 1.3
Created 25 October 2017
Last Modified 20 March 2023

Procedure Examples

ID Name Description
S1062 S.O.V.A. S.O.V.A. has C2 commands to add an infected device to a DDoS pool.6

Detection

ID Data Source Data Component
DS0042 User Interface System Notifications

References

  1. Chris Matyszczyk. (2014, May 1). FCC: Man used device to jam drivers’ cell phone calls. Retrieved November 8, 2018. ↩

  2. David Kravets. (2016, March 10). Man accused of jamming passengers’ cell phones on Chicago subway. Retrieved November 8, 2018. ↩

  3. Jeffrey Cichonski, Joshua M Franklin, Michael Bartock. (2017, December). Guide to LTE Security. Retrieved January 20, 2017. ↩

  4. Matt Richtel. (2007, November 4). Devices Enforce Silence of Cellphones, Illegally. Retrieved November 8, 2018. ↩

  5. Trevor Mogg. (2015, June 5). Florida teacher punished after signal-jamming his students’ cell phones. Retrieved November 8, 2018. ↩

  6. ThreatFabric. (2021, September 9). S.O.V.A. - A new Android Banking trojan with fowl intentions. Retrieved February 6, 2023. ↩