ID | Name |
---|---|
T1628.001 | Suppress Application Icon |
T1628.002 | User Evasion |
T1628.003 | Conceal Multimedia Files |
Adversaries may attempt to hide multimedia files from the user. By doing so, adversaries may conceal captured files, such as pictures, videos and/or screenshots, then later exfiltrate those files.
Specific to Android devices, if the .nomedia
file is present in a folder, multimedia files in that folder will not be visible to the user in the Gallery application. Additionally, other applications are asked not to scan the folder with the .nomedia
file, effectively making the folder appear invisible to the user.
This technique is often used by stalkerware and spyware applications.
ID | Mitigation | Description |
---|---|---|
M1059 | Do Not Mitigate |
Conceal Multimedia Files likely should not be mitigated with preventative controls because the |