The sub-techniques beta is now live! Read the release blog post for more info.

Network Information Discovery

Adversaries may use device sensors to collect information about nearby networks, such as Wi-Fi and Bluetooth.

ID: T1507
Tactic Type: Post-Adversary Device Access
Tactic: Collection
Platform: Android
Version: 1.0
Created: 10 July 2019
Last Modified: 10 July 2019

Procedure Examples

Name Description

Exodus Two collects a list of nearby base stations. [3]


FlexiSpy can collect a list of known Wi-Fi access points. [1]


Monokle can retrieve nearby cell tower and Wi-Fi network information.[4]


Pallas gathers and exfiltrates data about nearby Wi-Fi access points.[2]


This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.