Skip to content

DoubleAgent

Software · ATTACK:mobile:S0550

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:S0550",
  "title": "DoubleAgent",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0550",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--3d6c4389-3489-40a3-beda-c56e650b6f68",
  "external_id": "S0550",
  "domain": "mobile",
  "created": "2020-12-24T21:50:02.027Z",
  "modified": "2025-04-25T14:40:24.588Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Lookout Uyghur Campaign",
      "url": "https://www.lookout.com/documents/threat-reports/us/lookout-uyghur-malware-tr-us.pdf"
    }
  ]
}

Explicit source assertions (18)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1628.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0cfbea52-d6ab-467f-97e5-8c74b332b16f

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1636.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--20aaafe2-1f55-410f-9eb1-1fc979021fe0

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1636.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--22334426-e99f-4e97-b4dd-17e297da4118

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1645

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2908f0f6-2408-41a1-aaab-cf3e7db06aad

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1623.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2d1b46d5-cc2e-4312-adf2-43fb130a506b

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1429

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3752c235-0576-47dc-b05d-d3eaeaccfecc

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1407

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4b16e681-9542-4f32-b23a-f1b0caf44b6a

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1636.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--506d657b-1634-442e-8179-7187f82feb3a

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1630.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--57a069a0-399f-43ab-9efc-50432a41b26b

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1533

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--64ddcf35-dbf0-4b9f-bf07-1e0bde8bbe65

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1437

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a451966b-f826-422b-9505-f564b9988a9c

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1404

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a501b700-250f-4e9a-a20f-656ae9bf90f9

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1406

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ca486783-9413-4f39-8d2f-3adcb3e79127

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1409

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d4154247-90ce-43b9-8c17-5c28f67617f5

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1420

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d70aaf50-29b7-4687-98ea-ffaa3fa858c0

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1418

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e9c5deb9-30d4-4bc3-98ca-6089d4b74b1e

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1655.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ef792cb5-cb1f-4871-a2ef-20e6150d4005

Lookout Uyghur Campaign

ATTACK:mobile:S0550 → uses → ATTACK:mobile:T1426

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f9de9819-b131-459e-948b-bdf3fe6f1ef0

Lookout Uyghur Campaign

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.