DroidJack
Software · ATTACK:mobile:S0320
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S0320",
"title": "DroidJack",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0320",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--05c4f87c-be8f-46ea-8d9a-2a0aad8f52c1",
"external_id": "S0320",
"domain": "mobile",
"created": "2017-10-25T14:48:40.571Z",
"modified": "2025-04-16T21:22:03.310Z",
"version": "1.2",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "DroidJack"
},
{
"source_name": "Proofpoint-Droidjack",
"url": "https://www.proofpoint.com/us/threat-insight/post/droidjack-uses-side-load-backdoored-pokemon-go-android-app"
},
{
"source_name": "Zscaler-SuperMarioRun",
"url": "https://www.zscaler.com/blogs/security-research/super-mario-run-malware-2-droidjack-rat"
}
]
}Explicit source assertions (5)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S0320 → uses → ATTACK:mobile:T1655.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3c57ee56-34bc-4f0c-b363-68dab3e5e7b3
Proofpoint-DroidjackATTACK:mobile:S0320 → uses → ATTACK:mobile:T1512
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6961eec4-8e31-4be1-88d9-dca682e38b8c
Zscaler-SuperMarioRunATTACK:mobile:S0320 → uses → ATTACK:mobile:T1429
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69de3f7e-faa7-4342-b755-4777a68fd89b
Zscaler-SuperMarioRunATTACK:mobile:S0320 → uses → ATTACK:mobile:T1636.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--910009da-65c0-4e6a-aeb2-386c643d1c0e
Zscaler-SuperMarioRunATTACK:mobile:S0320 → uses → ATTACK:mobile:T1636.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c65661a6-6047-4901-ac2c-3ca4b1bbbb28
Zscaler-SuperMarioRun