aol.pm

Monokle

Software · ATTACK:mobile:S0407

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:mobile:S0407",
  "title": "Monokle",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0407",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--6a7aaab1-3e0a-48bb-ba66-bbf7665c0a65",
  "external_id": "S0407",
  "domain": "mobile",
  "created": "2019-09-04T14:28:14.181Z",
  "modified": "2025-04-25T14:40:29.512Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Lookout-Monokle",
      "url": "https://www.lookout.com/documents/threat-reports/lookout-discovers-monokle-threat-report.pdf"
    }
  ]
}

Explicit source assertions (24)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1644

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--069b2328-442b-491e-962d-d3fe01f0549e

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1406

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--12098dee-27b3-4d0b-a15a-6b5955ba8879

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--17697784-f6e0-4062-adaa-7779e44e2d62

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1421

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--25cdb4f2-5b38-411c-bfb6-eca7ea4d4527

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1512

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2e08820f-a81d-480e-9e60-f14db3e49080

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1417.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--34f9aed0-48a7-4815-8456-5541a7b8210f

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1630.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3f2daf2e-c28c-46cd-bf91-ae35e873f365

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1640

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--545d9313-3fcc-4d4a-b9d2-7555430df8f2

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1617

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5d2a3a9f-2467-4ac6-ab64-ffe91ec584da

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1533

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5e360913-4986-4423-8d3c-46d3202b7787

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1513

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6556536c-d5ea-4a3d-ae48-4016d4d762ff

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1616

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--716f68ee-1e77-4254-8f67-d8f3c71db678

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1422

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9373912a-affa-4a3c-ad97-1b8311e228ee

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1638

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--93b2474b-0ba6-469e-a4e8-d17a41d0d016

Xiao-KeyRaider

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1645

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9d72c60b-d5d1-4b50-a01f-3882ddb335d9

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1636.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a20581b4-21fa-4ed9-b056-d139998868e8

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1426

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--be256f8a-8bae-4a00-8682-22797ba7e0ce

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1430

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c6241ba3-e0f9-48a7-9ed7-a5544a090081

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1544

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d0c21324-62e3-46e5-823b-ea0c03a4885d

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1636.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d22f2c45-d6fa-419a-8f25-65ea37529ccc

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1429

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d4a5a902-231e-4878-ad5b-39620498b018

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1636.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d63f27cf-95a3-42bb-86dd-dc18e22cb898

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1422.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e47ea9b6-8e05-4a54-ac6e-ba621dc3b717

Lookout-Monokle

ATTACK:mobile:S0407 → uses → ATTACK:mobile:T1418

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f65087b4-adf2-4292-a711-7ae829e91397

Lookout-Monokle

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.