Concipit1248
Concipit1248 is iOS spyware that was discovered using the same name as the developer of the Android spyware Corona Updates. Further investigation revealed that the two pieces of software contained the same C2 URL and similar functionality.[1]
ID: S0426
ⓘ
Associated Software: Corona Updates
ⓘ
Type: MALWARE
ⓘ
Platforms: iOS
Version: 1.0
Created: 24 April 2020
Last Modified: 30 April 2020
Associated Software Descriptions
| Name | Description |
|---|---|
| Corona Updates |
Techniques Used
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Mobile | T1437 | .001 | Application Layer Protocol: Web Protocols |
Concipit1248 communicates with the C2 server using HTTP requests.[1] |
| Mobile | T1533 | Data from Local System |
Concipit1248 can collect device photos.[1] |
|
| Mobile | T1512 | Video Capture |
Concipit1248 requests permissions to use the device camera.[1] |
|