Skip to content

Use Recent OS Version

Mitigation · ATTACK:mobile:M1006

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:M1006",
  "title": "Use Recent OS Version",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M1006",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--0beabf44-e8d8-4ae4-9122-ef56369a2564",
  "external_id": "M1006",
  "domain": "mobile",
  "created": "2017-10-25T14:48:51.657Z",
  "modified": "2025-04-25T14:40:08.756Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [

  ]
}

Explicit source assertions (35)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1424

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--024f9ee4-cb7d-49f4-b180-ad1e5e168a4c

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1628.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--049a5149-00c9-492a-8ffb-463f3d0cd910

Android 10 Limitations to Hiding App Icons · LauncherApps getActivityList

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1641.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--18a6020d-8fea-4a6e-84ab-a18343f2acea

Android 10 Privacy Changes

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1430

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1b633efc-762f-47f9-96c3-d08ba92e0e3e

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1417.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1f44936e-b84c-404f-a92e-6fb7e24b5435

Android 12 Features

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1629.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--26b1025b-5c08-4b6e-8c50-7d2baf29e7b7

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1636

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--26bf27dc-f65d-477d-abbd-f4c3ce475c51

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1626.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--289f5e23-088a-4840-a2a6-bab30da2a64b

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1632.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--31330d32-50c8-4499-91fb-e1dcffa9ea8f

Symantec-iOSProfile2 · Android-TrustedCA

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1409

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3ebcd3d8-dd8e-4cc9-8087-ce9e93df6f56

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1407

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3ebdc17d-401e-4f6a-af51-2dc57437b817

Android 10 Execute

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1627

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--442dd700-2d7d-4cad-8282-9027e4f69133

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1635

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--44304163-9a44-4760-bd04-0e14adb33299

Trend Micro iOS URL Hijacking

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1512

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--492d5699-f885-411a-8431-254fcf33fb12

Android Capture Sensor 2019

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1641

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4ee57616-7205-490c-86c3-c27dcffd8689

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1624.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4ff5f854-bfe9-45bc-b11a-196cf826b760

Android Changes to System Broadcasts

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1422

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--554ec347-c8b2-43da-876b-36608dcc543d

TelephonyManager

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1661

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6603a556-9732-4f8b-ac9c-5c3949b251ed

app_hibernation

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1420

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7260c8fe-6b3b-48a2-889f-f329fb5b4ef0

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1636.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--77740738-9796-4991-8898-dc2ba10c9c25

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1642

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--79c3fe5d-585b-401a-8bb4-84bfdc7252a1

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1629.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7b3fa5cb-bd70-47e0-acfb-7db99e29e70f

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1429

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7b679dbf-4e31-4d0b-9e13-eb8c3b98b7fb

Android Capture Sensor 2019

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1638

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7db33293-6971-4c0d-88e0-18f505ebd943

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1417

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--86170d29-0e41-44d0-94b0-de7d23718302

Android 12 Features

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1627.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8726b157-3575-450f-bb7f-f17bb18e6aef

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1632

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8f22a4ce-f075-4343-acb0-1d45c56e91e8

Symantec-iOSProfile2 · Android-TrustedCA

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1624

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8fd05d96-552d-4ef9-98e3-ea70dc84f6a9

Android Changes to System Broadcasts

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1418.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a92a805e-d5f5-4e94-8592-c253e03e4476

Android Package Visibility

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1414

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--aa5877fd-ef7d-435e-86af-c427f086b3c5

Android 10 Privacy Changes

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1458

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--abd2e863-4bd3-4686-b2aa-f8a097a41c99

Elcomsoft-iOSRestricted

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1422.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b23e1e5d-3acc-456a-b63e-31c0bd5fe4a5

TelephonyManager

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1418

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b247a4f6-3629-4123-84b0-c7c5b3e7e37e

Android Package Visibility

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1635.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d71fab20-a56c-4404-a65d-aaa37056f16e

Trend Micro iOS URL Hijacking

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1577

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d84604bc-2314-4340-b9c1-b1265c0f6c37

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.