Skip to content

BOULDSPY

Software · ATTACK:mobile:S1079

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:S1079",
  "title": "BOULDSPY",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1079",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--a2ee7d2d-fb45-44f3-8f67-9921c7810db1",
  "external_id": "S1079",
  "domain": "mobile",
  "created": "2023-07-21T19:31:54.632Z",
  "modified": "2023-10-20T21:40:21.121Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "lookout_bouldspy_0423",
      "url": "https://www.lookout.com/blog/iranian-spyware-bouldspy"
    }
  ]
}

Explicit source assertions (25)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1409

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--088c74f5-4b43-48aa-a2be-275f0c02ffc8

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1532

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--11a992e7-83a3-4dc3-b391-fbd79e518943

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1407

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--13e69c40-1511-4fac-b4c3-d31fc4b6c579

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1429

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1b9b145c-ce80-4d0e-99f2-d756b806745b

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1636.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1f31e348-a4ee-4874-891f-393c65a7640a

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1422.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--279b016a-45c8-4961-88fa-48162e56c3fa

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1414

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4c035760-9bf2-40cd-87d1-f286afd76376

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1422

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--56c8af86-2924-46f8-a1d7-8309ee6f0282

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1646

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--724e1b64-7c9b-4a8f-a2ab-3f9cab539e68

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1513

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7bbbd2aa-104f-443a-907e-6e1fbcf0a73e

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1437.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7d2f869d-a117-4b1f-a783-c6d3fc002562

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1533

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8a89f675-4e43-4fe1-8bbd-8e49e07d11be

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1426

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a25a0454-d6da-4448-a3c5-33648ee6675a

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1655.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b0bade50-bcca-4924-9746-c4ed0c3be76c

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1644

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b22addc1-6a23-4657-8164-3705e12bb95b

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1636.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bef936d5-736e-491a-9c30-37b8362a5d96

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1512

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c186864b-0af9-42eb-92ba-b8a6952e89b6

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1417.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ca568149-9971-4d15-b3db-ff7dabd49695

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1577

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cb5a81bb-a3c6-4d7c-836c-c0bd6227b48f

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1636.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dc354395-cccf-471a-9335-8538ce20f1ec

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1418

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dcf01e96-1498-4ebf-b46f-d4f4eb796f23

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1422.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e8c77126-5279-4c39-ad84-87e4ab8ce37f

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1398

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f259b5a8-bf2f-48c9-ae1b-b20d53daf665

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1624

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f747ccb7-32c0-45fc-9842-bfb160a9db22

lookout_bouldspy_0423

ATTACK:mobile:S1079 → uses → ATTACK:mobile:T1430

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fadd27ec-56ac-4834-af40-76c9e8764eb9

lookout_bouldspy_0423

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.