Detection of Phishing

Technique Detected:  Phishing | T1660

ID: DET0684
Domains: Mobile
Analytics: AN1791, AN1792
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1791

Mobile security products may provide URL inspection services that could determine if a domain being visited is malicious.
Enterprises may be able to detect anomalous traffic originating from mobile devices, which could indicate compromise.

Log Sources
Data Component Name Channel
Network Traffic Content (DC0085) Network Traffic None
Network Traffic Flow (DC0078) Network Traffic None

AN1792

Mobile security products may provide URL inspection services that could determine if a domain being visited is malicious.
Enterprises may be able to detect anomalous traffic originating from mobile devices, which could indicate compromise.

Log Sources
Data Component Name Channel
Network Traffic Content (DC0085) Network Traffic None
Network Traffic Flow (DC0078) Network Traffic None