CherryBlos
Software · ATTACK:mobile:S1225
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:mobile:S1225",
"title": "CherryBlos",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S1225",
"snapshot": "mobile-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--3cf81957-489a-469f-b013-362d548a96c1",
"external_id": "S1225",
"domain": "mobile",
"created": "2025-06-25T15:32:53.278Z",
"modified": "2025-10-23T20:45:51.613Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "TrendMicro_CherryBlos_July2023",
"url": "https://www.trendmicro.com/en_us/research/23/g/cherryblos-and-faketrade-android-malware-involved-in-scam-campai.html"
}
]
}Explicit source assertions (13)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1541
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--05a0ac14-12c3-428c-9567-fecb3e29abe3
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1453
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--137ec7b1-8f78-4b03-8dec-f445800d36c1
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1417
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1659ff92-3a84-4cc3-84dc-42dcc8a91dc4
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1424
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--18c212f3-8c21-427c-9654-ebffbf33fac7
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1418
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2305ceb7-f237-42bb-9a45-e245d8f82cde
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1660
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3237f5ff-b870-41a7-8448-6f6b387db61d
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1420
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--64a55364-3ad1-40e8-92a2-58a7a71a18c9
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1629
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--817d1e5f-5795-4189-81dc-bf90476e7adc
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1646
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bb6e0232-8205-4ae8-80a8-659d33056ac8
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1406.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cb2fcc6e-2728-4961-96f4-583e24c45e28
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1655
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e7d6a883-2f2b-41e7-954e-7888a65a6f42
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1544
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f44f18d4-4595-4277-9d1e-dd5be6d07a80
TrendMicro_CherryBlos_July2023ATTACK:mobile:S1225 → uses → ATTACK:mobile:T1437.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f4b0d3ea-ae51-4e3b-a642-8a853f583436
TrendMicro_CherryBlos_July2023