Skip to content

Stealth Mango

Software · ATTACK:mobile:S0328

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:S0328",
  "title": "Stealth Mango",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0328",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--085eb36d-697d-4d9a-bac3-96eb879fe73c",
  "external_id": "S0328",
  "domain": "mobile",
  "created": "2018-10-17T00:14:20.652Z",
  "modified": "2025-04-25T14:40:14.412Z",
  "version": "1.3",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Stealth Mango"
    },
    {
      "source_name": "Lookout-StealthMango",
      "url": "https://info.lookout.com/rs/051-ESQ-475/images/lookout-stealth-mango-srr-us.pdf"
    }
  ]
}

Explicit source assertions (14)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1512

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0bcdeb29-6eed-4c96-a9ae-e56aadc4a5db

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1429

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3498d304-48e3-4fe4-a3ab-fc261104f413

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1636.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--51457698-e98b-435a-88c2-75a82cdc2bda

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1582

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--52ad5145-3b04-4cc8-bed8-4a14501afe25

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1644

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5a7295a2-ad95-4362-8b2c-9265ad5c73b0

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1636.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--789699c2-44f1-4280-bf86-ab23e6a13e84

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1474.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--93c20f43-6684-471c-910f-d9577f289677

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1636.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a2323d47-348c-4e3c-9c25-7feb20e2e457

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1422

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a7336f2c-8f89-4d54-ac2b-77743afb2943

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1418

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f552ee2f-5e6a-47a1-b6a5-d5e5594feb0d

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1430

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f7c5c344-4310-4e2a-a5aa-133f3d132fff

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1456

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f989562f-41a8-46d3-94ba-fca7269ae592

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1533

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fb5c6c5e-53d4-4bb9-b9cf-74170058b19b

Lookout-StealthMango

ATTACK:mobile:S0328 → uses → ATTACK:mobile:T1636.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fb6458b0-01b8-4c3f-b0f2-ef5d5bd9f6a8

Lookout-StealthMango

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.