aol.pm

Disable or Modify Tools

Subtechnique · ATTACK:mobile:T1629.003

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:mobile:T1629.003",
  "title": "Disable or Modify Tools",
  "type": "Subtechnique",
  "source_url": "https://attack.mitre.org/techniques/T1629/003",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--2aa78dfd-cb6f-4c70-9408-137cfd96be49",
  "external_id": "T1629.003",
  "domain": "mobile",
  "created": "2022-04-01T18:51:13.963Z",
  "modified": "2025-10-24T17:48:33.763Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [
    "defense-evasion"
  ],
  "source_references": [

  ]
}

Explicit source assertions (18)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:M1004 → mitigates → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0ce5bf43-39e1-4afb-a939-1984cc2d235c

ATTACK:mobile:S1214 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--11b20d60-6bec-4ce4-b02f-38ec276b3c9a

McAfee MoqHao 2019

ATTACK:mobile:S1054 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2359ad4b-b00b-4fd5-aef8-2d2be8bcf081

cyble_drinik_1022

ATTACK:mobile:M1010 → mitigates → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--23fa0fcc-0193-45f2-9e0b-a5f68380015f

ATTACK:mobile:T1629.003 → subtechnique-of → ATTACK:mobile:T1629

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2f55e452-f8b3-402b-a193-d261dac9f327

ATTACK:mobile:M1011 → mitigates → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4943cca6-69b1-4565-ac09-87ebda04584c

ATTACK:mobile:S1067 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4b7e117b-0c82-49d0-bee6-119158b3355b

proofpoint_flubot_0421 · Europol FluBot Jun2022

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--606b07b9-b5a4-464f-8381-062e2134d0ab

cleafy_brata_0122 · mcafee_brata_0421

ATTACK:mobile:S1061 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--75ed2348-279f-4485-97a3-9a5ada27d799

lookout_abstractemu_1021

ATTACK:mobile:S0480 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7b611c76-0ea1-49c5-9b9a-2e504a0bbe14

Threat Fabric Cerberus

ATTACK:mobile:S0422 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7bf2e05e-496f-49d1-8a37-48cc3ff8d6cc

Cofense Anubis

ATTACK:mobile:S0485 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8611661c-04b4-4a82-9669-2d0e26b7b3f3

Bitdefender Mandrake

ATTACK:mobile:C0033 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--935d2296-2a9d-42dd-af8c-2d8873dd7e8f

welivesec_strongpity

ATTACK:mobile:S1195 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9557dc5c-272d-46ba-bd39-0ac2be35df19

welivesecurity_apt-c-23

ATTACK:mobile:S0420 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9f9a0349-ca95-4bde-8d8d-af524ce19bc7

SecureList DVMap June 2017

ATTACK:mobile:S0494 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a63bafb6-6647-410f-8673-a53ef2dee5e2

Google Security Zen

ATTACK:mobile:M1001 → mitigates → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c5cb9fb4-2593-412f-82f8-a04a125bd429

ATTACK:mobile:S1083 → uses → ATTACK:mobile:T1629.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f69ff81e-22e4-450c-b3dd-7f3f66610663

cyble_chameleon_0423 · ThreatFabric_Chameleon_Dec2023

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.