GolfSpy
Software · ATTACK:mobile:S0421
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S0421",
"title": "GolfSpy",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0421",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--c19cfc89-5ac6-4d2d-a236-70d2b32e007c",
"external_id": "S0421",
"domain": "mobile",
"created": "2020-01-27T17:05:57.712Z",
"modified": "2026-09-02T18:45:46.709Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Trend Micro Bouncing Golf 2019",
"url": "https://blog.trendmicro.com/trendlabs-security-intelligence/mobile-cyberespionage-campaign-bouncing-golf-affects-middle-east/"
}
]
}Explicit source assertions (19)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1512
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0cabc5f9-045e-490c-a97f-efe00dbade86
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1476
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2a94bb7e-67af-4031-b4be-25c2a3ccd35c
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1636.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2ebd5c4c-af03-4874-a6fd-1e58d51cc055
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1646
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3dd0cd4d-bcde-4105-b98e-b32add191083
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1636.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4009ff40-4616-4b1c-bff9-599e52ccab37
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1624.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--465d14e7-eb9e-4794-9cb3-1de2cff86a8e
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1414
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4b68bcb1-a512-40f7-9aee-235b3668f022
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1430
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5088a10e-03d2-4643-8df8-b7b601c2cc24
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1406
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--60db521a-ae2d-4a9a-8c6d-47a5528f1ecb
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1533
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--65a24b75-4bb0-441a-8cb2-a34077b13f61
Trend Micro Bouncing Golf 2019ATTACK:mobile:G0097 → uses → ATTACK:mobile:S0421
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7850d933-120b-4ae6-998d-8dc4dfd6d164
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1418
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a9689f2c-ad8f-4861-8cad-d78e07fd1530
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1426
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ccfffa97-17fd-4826-9a16-c9d8174fb8ac
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1424
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cd6a9777-a8fd-43ca-91dc-cafc7d4b7df3
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1429
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ced70cea-b2ac-45b8-9f7d-779eedbdf06c
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1636.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--db34a2c8-01e0-4cd3-a497-0f4bca36812a
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1513
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e35b013b-89e8-41b3-a518-7737234ab71b
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1532
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e5e4567e-05a3-4d79-beab-191efc336473
Trend Micro Bouncing Golf 2019ATTACK:mobile:S0421 → uses → ATTACK:mobile:T1630.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f4aeacef-035c-4308-9e85-997703e27809
Trend Micro Bouncing Golf 2019