Detection of Generate Traffic from Victim

ID: DET0608
Domains: Mobile
Analytics: AN1659, AN1660
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1659

On Android, the user can review which applications can use premium SMS features in the "Special access" page within application settings.
Application vetting services can detect when applications request the SEND_SMS permission, which should be infrequently used.

Log Sources
Data Component Name Channel
System Settings (DC0118) User Interface None
Permissions Requests (DC0114) Application Vetting None

AN1660

On Android, the user can review which applications can use premium SMS features in the "Special access" page within application settings.
Application vetting services can detect when applications request the SEND_SMS permission, which should be infrequently used.

Log Sources
Data Component Name Channel
System Settings (DC0118) User Interface None
Permissions Requests (DC0114) Application Vetting None