Antivirus/Antimalware

Mobile security products, such as Mobile Threat Defense (MTD), offer various device-based mitigations against certain behaviors.

ID: M1058
Version: 1.0
Created: 21 September 2023
Last Modified: 21 September 2023

Techniques Addressed by Mitigation

Domain ID Name Use
Mobile T1664 Exploitation for Initial Access

Mobile security products can potentially detect if a device is vulnerable to a known exploit and can alert the user to update their device.

Mobile T1660 Phishing

Some mobile security products offer a loopback VPN used for inspecting traffic. This could proactively block traffic to websites that are known for phishing or appear to be conducting a phishing attack.