Tiktok Pro
Tiktok Pro is spyware that has been masquerading as the TikTok application.[1]
Techniques Used
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Mobile | T1429 | Audio Capture |
Tiktok Pro can capture audio from the device’s microphone and can record phone calls.[1] |
|
| Mobile | T1623 | .001 | Command and Scripting Interpreter: Unix Shell |
Tiktok Pro can execute commands .[1] |
| Mobile | T1533 | Data from Local System |
Tiktok Pro can collect device photos and credentials from other applications.[1] |
|
| Mobile | T1624 | .001 | Event Triggered Execution: Broadcast Receivers |
Tiktok Pro has registered for device boot, incoming, and outgoing calls broadcast intents.[1] |
| Mobile | T1420 | File and Directory Discovery |
Tiktok Pro can list all hidden files in the |
|
| Mobile | T1541 | Foreground Persistence |
Tiktok Pro has shown a persistent notification to maintain access to device sensors.[1] |
|
| Mobile | T1628 | .001 | Hide Artifacts: Suppress Application Icon |
Tiktok Pro can hide its icon after launch.[1] |
| Mobile | T1630 | .002 | Indicator Removal on Host: File Deletion |
Tiktok Pro can delete attacker-specified files.[1] |
| Mobile | T1417 | .002 | Input Capture: GUI Input Capture |
Tiktok Pro can launch a fake Facebook login page.[1] |
| Mobile | T1430 | Location Tracking |
Tiktok Pro can track the device’s location.[1] |
|
| Mobile | T1655 | .001 | Masquerading: Match Legitimate Name or Location |
Tiktok Pro has masqueraded as TikTok.[1] |
| Mobile | T1636 | .002 | Protected User Data: Call Log |
Tiktok Pro can collect the device’s call logs.[1] |
| .003 | Protected User Data: Contact List |
Tiktok Pro can access the device's contact list.[1] |
||
| .004 | Protected User Data: SMS Messages |
Tiktok Pro can collect SMS messages from the device.[1] |
||
| Mobile | T1603 | Scheduled Task/Job |
Tiktok Pro has contained an alarm that triggers every three minutes and timers for communicating with the C2.[1] |
|
| Mobile | T1513 | Screen Capture |
Tiktok Pro can take screenshots.[1] |
|
| Mobile | T1582 | SMS Control |
Tiktok Pro can send SMS messages.[1] |
|
| Mobile | T1418 | Software Discovery |
Tiktok Pro can obtain a list of installed applications.[1] |
|
| Mobile | T1426 | System Information Discovery |
Tiktok Pro can check the device’s battery status.[1] |
|
| Mobile | T1512 | Video Capture |
Tiktok Pro can capture photos and videos from the device’s camera.[1] |
|