Tactics - Mobile | MITRE ATT&CK®

<!DOCTYPE html> <html lang='en'> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=UA-62667723-1"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-62667723-1'); </script> <meta name="google-site-verification" content="2oJKLqNN62z6AOCb0A0IXGtbQuj-lev5YPAHFF_cbHQ"/> <meta charset='utf-8'> <meta name='viewport' content='width=device-width, initial-scale=1,shrink-to-fit=no'> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <link rel='shortcut icon' href="/versions/v13/theme/favicon.ico" type='image/x-icon'> <title>Tactics - Mobile | MITRE ATT&CK®</title>  <link rel='stylesheet' href="/versions/v13/theme/style/bootstrap.min.css" /> <link rel='stylesheet' href="/versions/v13/theme/style/bootstrap-glyphicon.min.css" /> <link rel='stylesheet' href="/versions/v13/theme/style/bootstrap-tourist.css" /> <link rel='stylesheet' href="/versions/v13/theme/style/bootstrap-select.min.css" /> <link rel="stylesheet" type="text/css" href="/versions/v13/theme/style.min.css?e8044105"> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"> </head> <body> <div class="container-fluid attack-website-wrapper d-flex flex-column h-100"> <div class="row sticky-top flex-grow-0 flex-shrink-1">  <header class="col px-0"> <nav class='navbar navbar-expand-lg navbar-dark position-static'> <a class='navbar-brand' href="/versions/v13/"><img src="/versions/v13/theme/images/mitre_attack_logo.png" class="attack-logo"></a> <button class='navbar-toggler' type='button' data-toggle='collapse' data-target='#navbarCollapse' aria-controls='navbarCollapse' aria-expanded='false' aria-label='Toggle navigation'> <span class='navbar-toggler-icon'></span> </button> <div class='collapse navbar-collapse' id='navbarCollapse'> <ul class='nav nav-tabs ml-auto'> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v13/matrices/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Matrices</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v13/matrices/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v13/matrices/mobile/">Mobile</a> <a class="dropdown-item" href="/versions/v13/matrices/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v13/tactics/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Tactics</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v13/tactics/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v13/tactics/mobile/">Mobile</a> <a class="dropdown-item" href="/versions/v13/tactics/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v13/techniques/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Techniques</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v13/techniques/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v13/techniques/mobile/">Mobile</a> <a class="dropdown-item" href="/versions/v13/techniques/ics/">ICS</a> </div> </li> <li class="nav-item"> <a href="/versions/v13/datasources" class="nav-link" ><b>Data Sources</b></a> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v13/mitigations/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Mitigations</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v13/mitigations/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v13/mitigations/mobile/">Mobile</a> <a class="dropdown-item" href="/versions/v13/mitigations/ics/">ICS</a> </div> </li> <li class="nav-item"> <a href="/versions/v13/groups" class="nav-link" ><b>Groups</b></a> </li> <li class="nav-item"> <a href="/versions/v13/software/" class="nav-link" ><b>Software</b></a> </li> <li class="nav-item"> <a href="/versions/v13/campaigns" class="nav-link" ><b>Campaigns</b></a> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v13/resources/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Resources</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v13/resources/">General Information</a> <a class="dropdown-item" href="/versions/v13/resources/getting-started/">Getting Started</a> <a class="dropdown-item" href="/versions/v13/resources/training/">Training</a> <a class="dropdown-item" href="/versions/v13/resources/attackcon/">ATT&CKcon</a> <a class="dropdown-item" href="/versions/v13/resources/working-with-attack/">Working with ATT&CK</a> <a class="dropdown-item" href="/versions/v13/resources/faq/">FAQ</a> <a class="dropdown-item" href="/resources/updates/">Updates</a> <a class="dropdown-item" href="/resources/versions/">Versions of ATT&CK</a> <a class="dropdown-item" href="/versions/v13/resources/related-projects/">Related Projects</a> <a class="dropdown-item" href="/versions/v13/resources/brand/">Brand Guide</a> </div> </li> <li class="nav-item"> <a href="https://medium.com/mitre-attack/" target="_blank" class="nav-link"> <b>Blog</b>  <img src="/versions/v13/theme/images/external-site.svg" alt="External site" class="external-icon" /> </a> </li> <li class="nav-item"> <a href="/versions/v13/resources/contribute/" class="nav-link" ><b>Contribute</b></a> </li> <li class="nav-item"> <button id="search-button" class="btn search-button">Search <div id="search-icon" class="icon-button search-icon"></div></button> </li> </ul> </div> </nav> </header> </div> <div class="row flex-grow-0 flex-shrink-1">  <div class="col px-0">  <div class="container-fluid version-banner"><div class="icon-inline baseline mr-1"><img src="/versions/v13/theme/images/icon-warning-24px.svg"></div>Currently viewing <a href="https://github.com/mitre/cti/releases/tag/ATT%26CK-v13.1" target="_blank">ATT&CK v13.1</a> which was live between April 25, 2023 and October 30, 2023. <a href="/resources/versions/">Learn more about the versioning system</a> or <a href="/">see the live site</a>.</div> </div> </div> <div class="row flex-grow-1 flex-shrink-0">   <div class="sidebar nav sticky-top flex-column pr-0 pt-4 pb-3 pl-3" id="v-tab" role="tablist" aria-orientation="vertical"> <div class="resizer"></div>  <div id="v-tab" role="tablist" aria-orientation="vertical" class="h-100"> <div class="sidenav-wrapper"> <div class="heading" data-toggle="collapse" data-target="#sidebar-collapse" id="v-home-tab" aria-selected="false">TACTICS <i class="fa fa-fw fa-chevron-down"></i> <i class="fa fa-fw fa-chevron-up"></i> </div> <br class="br-mobile"> <div class="collapse show" id="sidebar-collapse"> <div class="sidenav-list"> <div class="sidenav"> <div class="sidenav-head " id="enterprise"> <a href="/versions/v13/tactics/enterprise/"> Enterprise </a> <div class="expand-button collapsed" id="enterprise-header" data-toggle="collapse" data-target="#enterprise-body" aria-expanded="false" aria-controls="#enterprise-body"></div> </div> <div class="sidenav-body collapse" id="enterprise-body" aria-labelledby="enterprise-header"> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Reconnaissance"> <a href="/versions/v13/tactics/TA0043/"> Reconnaissance </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Resource Development"> <a href="/versions/v13/tactics/TA0042/"> Resource Development </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Initial Access"> <a href="/versions/v13/tactics/TA0001/"> Initial Access </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Execution"> <a href="/versions/v13/tactics/TA0002/"> Execution </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Persistence"> <a href="/versions/v13/tactics/TA0003/"> Persistence </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Privilege Escalation"> <a href="/versions/v13/tactics/TA0004/"> Privilege Escalation </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Defense Evasion"> <a href="/versions/v13/tactics/TA0005/"> Defense Evasion </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Credential Access"> <a href="/versions/v13/tactics/TA0006/"> Credential Access </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Discovery"> <a href="/versions/v13/tactics/TA0007/"> Discovery </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Lateral Movement"> <a href="/versions/v13/tactics/TA0008/"> Lateral Movement </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Collection"> <a href="/versions/v13/tactics/TA0009/"> Collection </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Command and Control"> <a href="/versions/v13/tactics/TA0011/"> Command and Control </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Exfiltration"> <a href="/versions/v13/tactics/TA0010/"> Exfiltration </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="enterprise-Impact"> <a href="/versions/v13/tactics/TA0040/"> Impact </a> </div> </div> </div> </div> <div class="sidenav"> <div class="sidenav-head active " id="mobile"> <a href="/versions/v13/tactics/mobile/"> Mobile </a> <div class="expand-button collapsed" id="mobile-header" data-toggle="collapse" data-target="#mobile-body" aria-expanded="false" aria-controls="#mobile-body"></div> </div> <div class="sidenav-body collapse" id="mobile-body" aria-labelledby="mobile-header"> <div class="sidenav"> <div class="sidenav-head " id="mobile-Initial Access"> <a href="/versions/v13/tactics/TA0027/"> Initial Access </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Execution"> <a href="/versions/v13/tactics/TA0041/"> Execution </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Persistence"> <a href="/versions/v13/tactics/TA0028/"> Persistence </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Privilege Escalation"> <a href="/versions/v13/tactics/TA0029/"> Privilege Escalation </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Defense Evasion"> <a href="/versions/v13/tactics/TA0030/"> Defense Evasion </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Credential Access"> <a href="/versions/v13/tactics/TA0031/"> Credential Access </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Discovery"> <a href="/versions/v13/tactics/TA0032/"> Discovery </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Lateral Movement"> <a href="/versions/v13/tactics/TA0033/"> Lateral Movement </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Collection"> <a href="/versions/v13/tactics/TA0035/"> Collection </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Command and Control"> <a href="/versions/v13/tactics/TA0037/"> Command and Control </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Exfiltration"> <a href="/versions/v13/tactics/TA0036/"> Exfiltration </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Impact"> <a href="/versions/v13/tactics/TA0034/"> Impact </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Network Effects"> <a href="/versions/v13/tactics/TA0038/"> Network Effects </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="mobile-Remote Service Effects"> <a href="/versions/v13/tactics/TA0039/"> Remote Service Effects </a> </div> </div> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics"> <a href="/versions/v13/tactics/ics/"> ICS </a> <div class="expand-button collapsed" id="ics-header" data-toggle="collapse" data-target="#ics-body" aria-expanded="false" aria-controls="#ics-body"></div> </div> <div class="sidenav-body collapse" id="ics-body" aria-labelledby="ics-header"> <div class="sidenav"> <div class="sidenav-head " id="ics-Initial Access"> <a href="/versions/v13/tactics/TA0108/"> Initial Access </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Execution"> <a href="/versions/v13/tactics/TA0104/"> Execution </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Persistence"> <a href="/versions/v13/tactics/TA0110/"> Persistence </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Privilege Escalation"> <a href="/versions/v13/tactics/TA0111/"> Privilege Escalation </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Evasion"> <a href="/versions/v13/tactics/TA0103/"> Evasion </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Discovery"> <a href="/versions/v13/tactics/TA0102/"> Discovery </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Lateral Movement"> <a href="/versions/v13/tactics/TA0109/"> Lateral Movement </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Collection"> <a href="/versions/v13/tactics/TA0100/"> Collection </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Command and Control"> <a href="/versions/v13/tactics/TA0101/"> Command and Control </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Inhibit Response Function"> <a href="/versions/v13/tactics/TA0107/"> Inhibit Response Function </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Impair Process Control"> <a href="/versions/v13/tactics/TA0106/"> Impair Process Control </a> </div> </div> <div class="sidenav"> <div class="sidenav-head " id="ics-Impact"> <a href="/versions/v13/tactics/TA0105/"> Impact </a> </div> </div> </div> </div> </div> </div> </div> </div>  </div> <div class="tab-content col-xl-9 col-lg-9 col-md-8 pt-4" id="v-tabContent"> <div class="tab-pane fade show active" id="v-attckmatrix" role="tabpanel" aria-labelledby="v-attckmatrix-tab"> <ol class="breadcrumb"> <li class="breadcrumb-item"><a href="/versions/v13/">Home</a></li> <li class="breadcrumb-item"><a href="/versions/v13/tactics/mobile/">Tactics</a></li> <li class="breadcrumb-item">Mobile</li> </ol> <div class="tab-pane fade show active" id="v-" role="tabpanel" aria-labelledby="v--tab"></div> <div class="row"> <div class="col-xl-12"> <div class="jumbotron jumbotron-fluid"> <div class="container-fluid"> <div class="container overflow-x-auto"> <div class="row"> <div class="col-md-10"> <h1> Mobile Tactics </h1> <p> Tactics represent the "why" of an ATT&CK technique or sub-technique. It is the adversary's tactical goal: the reason for performing an action. For example, an adversary may want to achieve credential access. </p> </div> <div class="col-md-2 div-count"> <h6 class="table-object-count">Mobile Tactics: 14</h6> </div> </div> <div class="row"> <div class="col"> <table class="table table-bordered table-alternate mt-2"> <thead> <tr> <th scope="col">ID</th> <th scope="col">Name</th> <th scope="col">Description</th> </tr> </thead> <tbody> <tr> <td> <a href="/versions/v13/tactics/TA0027">TA0027</a> </td> <td> <a href="/versions/v13/tactics/TA0027">Initial Access</a> </td> <td> The adversary is trying to get into your device. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0041">TA0041</a> </td> <td> <a href="/versions/v13/tactics/TA0041">Execution</a> </td> <td> The adversary is trying to run malicious code. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0028">TA0028</a> </td> <td> <a href="/versions/v13/tactics/TA0028">Persistence</a> </td> <td> The adversary is trying to maintain their foothold. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0029">TA0029</a> </td> <td> <a href="/versions/v13/tactics/TA0029">Privilege Escalation</a> </td> <td> The adversary is trying to gain higher-level permissions. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0030">TA0030</a> </td> <td> <a href="/versions/v13/tactics/TA0030">Defense Evasion</a> </td> <td> The adversary is trying to avoid being detected. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0031">TA0031</a> </td> <td> <a href="/versions/v13/tactics/TA0031">Credential Access</a> </td> <td> The adversary is trying to steal account names, passwords, or other secrets that enable access to resources. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0032">TA0032</a> </td> <td> <a href="/versions/v13/tactics/TA0032">Discovery</a> </td> <td> The adversary is trying to figure out your environment. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0033">TA0033</a> </td> <td> <a href="/versions/v13/tactics/TA0033">Lateral Movement</a> </td> <td> The adversary is trying to move through your environment. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0035">TA0035</a> </td> <td> <a href="/versions/v13/tactics/TA0035">Collection</a> </td> <td> The adversary is trying to gather data of interest to their goal. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0037">TA0037</a> </td> <td> <a href="/versions/v13/tactics/TA0037">Command and Control</a> </td> <td> The adversary is trying to communicate with compromised devices to control them. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0036">TA0036</a> </td> <td> <a href="/versions/v13/tactics/TA0036">Exfiltration</a> </td> <td> The adversary is trying to steal data. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0034">TA0034</a> </td> <td> <a href="/versions/v13/tactics/TA0034">Impact</a> </td> <td> The adversary is trying to manipulate, interrupt, or destroy your devices and data. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0038">TA0038</a> </td> <td> <a href="/versions/v13/tactics/TA0038">Network Effects</a> </td> <td> The adversary is trying to intercept or manipulate network traffic to or from a device. </td> </tr> <tr> <td> <a href="/versions/v13/tactics/TA0039">TA0039</a> </td> <td> <a href="/versions/v13/tactics/TA0039">Remote Service Effects</a> </td> <td> The adversary is trying to control or monitor the device using remote services. </td> </tr> </tbody> </table> </div> </div> </div> </div> </div> </div> </div> </div> </div>   <div class="overlay search" id="search-overlay" style="display: none;"> <div class="overlay-inner">  <div class="search-header"> <div class="search-input"> <input type="text" id="search-input" placeholder="search"> </div> <div class="search-icons"> <div class="search-parsing-icon spinner-border" style="display: none" id="search-parsing-icon"></div> <div class="close-search-icon" id="close-search-icon">×</div> </div> </div>  <div id="search-body" class="search-body"> <div class="results" id="search-results">  </div> <div id="load-more-results" class="load-more-results"> <button class="btn btn-default" id="load-more-results-button">load more results</button> </div> </div> </div> </div> </div> <div class="row flex-grow-0 flex-shrink-1">  <footer class="col footer p-3"> <div class="container-fluid"> <div class="row"> <div class="col-4 col-sm-4 col-md-3"> <div class="footer-center-responsive my-auto"> <a href="https://www.mitre.org" target="_blank" rel="noopener" aria-label="MITRE"> <img src="/versions/v13/theme/images/mitrelogowhiteontrans.gif" class="mitre-logo-wtrans"> </a> </div> </div> <div class="col-2 col-sm-2 footer-responsive-break"></div> <div class="col-6 col-sm-6 text-center"> <p> 漏 2015-2023, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation. </p> <div class="row"> <div class="col text-right"> <small> <a href="/versions/v13/resources/privacy" class="footer-link">Privacy Policy</a> </small> </div> <div class="col text-center"> <small> <a href="/versions/v13/resources/terms-of-use" class="footer-link">Terms of Use</a> </small> </div> <div class="col text-left "> <small> <a href="/versions/v13/resources/changelog.html" class="footer-link" data-toggle="tooltip" data-placement="top" data-html="true" title="ATT&CK content v13.1Website v4.0.5">ATT&CK v13.1</a> </small> </div> </div> </div> <div class="w-100 p-2 footer-responsive-break"></div> <div class="col"> <div class="footer-float-right-responsive-brand"> <div class="mb-1"> <a href="https://twitter.com/MITREattack" class="btn btn-primary w-100">  <img src="/versions/v13/theme/images/twitter.png" class="mr-1 twitter-icon"> <b>@MITREattack</b> </a> </div> <div class=""> <a href="/versions/v13/contact" class="btn btn-primary w-100"> Contact </a> </div> </div> </div> </div> </div> </div> </footer> </div> </div>  </div>  <script src="/versions/v13/theme/scripts/jquery-3.5.1.min.js"></script> <script src="/versions/v13/theme/scripts/popper.min.js"></script> <script src="/versions/v13/theme/scripts/bootstrap-select.min.js"></script> <script src="/versions/v13/theme/scripts/bootstrap.bundle.min.js"></script> <script src="/versions/v13/theme/scripts/site.js?8155"></script> <script src="/versions/v13/theme/scripts/settings.js?6073"></script> <script src="/versions/v13/theme/scripts/search_bundle.js"></script> <script src="/versions/v13/theme/scripts/resizer.js"></script>  <script src="/versions/v13/theme/scripts/navigation.js"></script> </body> </html>

CINXE.COM

Tactics - Mobile | MITRE ATT&CK®