MazarBOT

MazarBOT is Android malware that was distributed via SMS in Denmark in 2016. [1]

ID: S0303
Type: MALWARE
Version: 1.0
Created: 25 October 2017
Last Modified: 24 October 2022

Techniques Used

Domain ID Name Use
Mobile T1643 Generate Traffic from Victim

MazarBOT can send messages to premium-rate numbers.[1]

Mobile T1636 .004 Protected User Data: SMS Messages

MazarBOT can intercept two-factor authentication codes sent by online banking apps.[1]

References