Clipboard Data

Technique · ATTACK:mobile:T1414

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:T1414",
  "title": "Clipboard Data",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1414",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692",
  "external_id": "T1414",
  "domain": "mobile",
  "created": "2017-10-25T14:48:19.996Z",
  "modified": "2025-10-24T17:49:21.369Z",
  "version": "3.1",
  "aliases": [

  ],
  "tactics": [
    "collection",
    "credential-access"
  ],
  "source_references": [
    {
      "source_name": "Android 10 Privacy Changes",
      "url": "https://developer.android.com/about/versions/10/privacy/changes#clipboard-data"
    },
    {
      "source_name": "UIPPasteboard",
      "url": "https://developer.apple.com/documentation/uikit/uipasteboard"
    },
    {
      "source_name": "Fahl-Clipboard",
      "url": "https://saschafahl.de/static/paper/pwmanagers2013.pdf"
    },
    {
      "source_name": "Github Capture Clipboard 2019",
      "url": "https://github.com/grepx/android-clipboard-security"
    },
    {
      "source_name": "NIST Mobile Threat Catalogue",
      "url": "https://pages.nist.gov/mobile-threat-catalogue/application-threats/APP-35.html",
      "external_id": "APP-35"
    }
  ]
}

Explicit source assertions (6)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.