INSOMNIA
Software · ATTACK:mobile:S0463
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S0463",
"title": "INSOMNIA",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0463",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--21b7e0b0-0dea-4ccc-8ad4-8da51fe3a901",
"external_id": "S0463",
"domain": "mobile",
"created": "2020-06-02T14:32:31.461Z",
"modified": "2025-04-25T14:40:18.080Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Volexity Insomnia",
"url": "https://www.volexity.com/blog/2020/04/21/evil-eye-threat-actor-resurfaces-with-ios-exploit-and-updated-implant/"
}
]
}Explicit source assertions (17)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S0463 → uses → ATTACK:mobile:T1426
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0993769f-63fb-4720-bbcf-e6f37f71515e
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1404
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0bb6f851-4302-4936-a98e-d23feecb234d
Volexity InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1430
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0ef4845d-994e-4f0d-9eed-7cf600fc03b4
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1631.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--269d4409-e287-4ef3-b5f3-765ec03e503e
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1406
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2e59d381-eac6-41c6-a5e6-f9617c10259e
Volexity InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1636.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5706742b-733d-44e9-a032-62b81ba05bcf
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1422
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--61550ef4-41f0-4354-af5c-f47db8aca654
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1418
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6a715733-cde6-4903-b967-35562b584c6f
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1422.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--73e78aab-bcd9-4d3c-96f8-832f399bf2ee
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1509
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--81e1311e-4fe1-4177-ae12-1d50037c5e4f
Volexity InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1422.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--850e249d-c0a1-4608-9a60-bcf9c02b741c
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1636.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--875dc21d-92c3-45bf-be37-faa44f4449bf
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1636.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--891edea2-817c-4eeb-9991-b6e095c269a8
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1437.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--abf03652-acd0-4361-8a66-f7e70e8e4376
Volexity InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1533
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b9af8369-a6b2-4081-9f07-2ee15d56bffc
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1634.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c720fd30-5694-42b7-bf77-d948f7ba2b6f
Google Project Zero InsomniaATTACK:mobile:S0463 → uses → ATTACK:mobile:T1456
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fc816ddc-199d-47b0-93af-c81305d0919f
Volexity Insomnia