T1469 Remotely Wipe Data Without Authorization
An adversary who is able to obtain unauthorized access to or misuse authorized access to cloud services (e.g. Google’s Android Device Manager or Apple iCloud’s Find my iPhone) or to an EMM console could use that access to wipe enrolled devices .
Item |
Value |
ID |
T1469 |
Sub-techniques |
|
Tactics |
TA0039 |
Platforms |
Android, iOS |
Version |
1.0 |
Created |
25 October 2017 |
Last Modified |
17 October 2018 |
Mitigations
ID |
Mitigation |
Description |
M1011 |
User Guidance |
Encourage users to protect their account credentials and to enable available multi-factor authentication options. |
References