The sub-techniques beta is now live! Read the release blog post for more info.
SOFTWARE
SOFTWARE
1-9
A-B
C-D
E-F
G-H
I-J
K-L
M-N
O-P
Q-R
S-T
U-V
W-X
Y-Z
  1. Home
  2. Software
  3. MazarBOT

MazarBOT

MazarBOT is Android malware that was distributed via SMS in Denmark in 2016. [1]

ID: S0303
Type: MALWARE
Platforms: Android
Version: 1.1
Created: 25 October 2017
Last Modified: 11 December 2018
Mobile Layer
download view

Techniques Used

Domain ID Name Use
Mobile T1412 Capture SMS Messages

MazarBOT can intercept two-factor authentication codes sent by online banking apps.[1]
Mobile T1476 Deliver Malicious App via Other Means

MazarBOT is delivered via an unsolicited text message containing a link to a web download URI.[1]
Mobile T1448 Premium SMS Toll Fraud

MazarBOT can send messages to premium-rate numbers.[1]

References

  1. Graham Cluley. (2016, February 16). Android users warned of malware attack spreading via SMS. Retrieved December 23, 2016.