Skip to content

SharkBot

Software · ATTACK:mobile:S1055

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:S1055",
  "title": "SharkBot",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1055",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--9cd72f5c-bec0-4f7e-bb6d-296937116291",
  "external_id": "S1055",
  "domain": "mobile",
  "created": "2023-01-18T19:44:52.711Z",
  "modified": "2025-04-16T21:22:11.187Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "nccgroup_sharkbot_0322",
      "url": "https://research.nccgroup.com/2022/03/03/sharkbot-a-new-generation-android-banking-trojan-being-distributed-on-google-play-store/"
    }
  ]
}

Explicit source assertions (18)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1407

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--085f8397-0233-42d7-855e-3dbd709f2eca

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1644

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0e8607f6-daab-44df-b167-105403a4ef41

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1646

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0f70bdf1-a6a7-406c-a4c0-cee509ff8369

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1424

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--23a67f24-a8eb-4e31-acf1-11cb5e9f88b2

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1417.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--34dd5c26-eec9-4288-8e53-677271d490b2

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1637.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--35927c96-7645-4ef3-b3da-e44822386a10

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3857f790-6ea1-4f37-8d90-90904f175d63

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1636.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--433af79b-ce77-4a4c-84f7-6cdc34e70674

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1516

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5dc4eaca-ff82-412a-a8dd-168de1857d8c

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1661

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6ac2d9a5-248b-42c5-af71-3ffad7bc7f3e

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1582

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9f83d618-a42d-4797-b9fe-030affdbd13f

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1544

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a1a9db79-4a80-4e65-91bf-72e358d2ce41

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1406

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a6bb6c55-3b33-4cd4-981b-055551edc4c2

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1417.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--afc0e8b2-2e85-4640-8517-fb2e16831082

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1521.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b3866c07-e143-4d0d-9176-c2845f85c5ab

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1437.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bbc6308e-f7f6-40c7-80cb-f760d623c8af

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1521.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dd54e35c-d68b-4aa8-ad2a-acd4c76243c8

nccgroup_sharkbot_0322

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1517

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fa5f3aea-2131-4690-8833-dc428fae2b22

nccgroup_sharkbot_0322

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.