Skip to content

Uninstall Malicious Application

Subtechnique · ATTACK:mobile:T1630.001

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:T1630.001",
  "title": "Uninstall Malicious Application",
  "type": "Subtechnique",
  "source_url": "https://attack.mitre.org/techniques/T1630/001",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--0cdd66ad-26ac-4338-a764-4972a1e17ee3",
  "external_id": "T1630.001",
  "domain": "mobile",
  "created": "2022-03-30T19:31:31.855Z",
  "modified": "2026-05-12T15:12:00.620Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [
    "defense-evasion"
  ],
  "source_references": [
    {
      "source_name": "NIST Mobile Threat Catalogue",
      "url": "https://pages.nist.gov/mobile-threat-catalogue/application-threats/APP-43.html",
      "external_id": "APP-43"
    }
  ]
}

Explicit source assertions (11)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:M1001 → mitigates → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--15d83ba8-be89-4151-9c6e-35d14df4fa80

ATTACK:mobile:S1094 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--257f4f86-950f-4f5a-b38c-0de85753d2d3

mcafee_brata_0421 · securelist_brata_0819

ATTACK:mobile:S1055 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3857f790-6ea1-4f37-8d90-90904f175d63

nccgroup_sharkbot_0322

ATTACK:mobile:T1630.001 → subtechnique-of → ATTACK:mobile:T1630

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4896e256-fb04-403c-bbb7-2323b158a6e0

ATTACK:mobile:S1062 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4d431474-1dcc-4d0e-9906-129eb02f00b3

threatfabric_sova_0921

ATTACK:mobile:S0427 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4f812a57-efdc-463b-bf37-baa4bca7502b

SecurityIntelligence TrickMo

ATTACK:mobile:M1011 → mitigates → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--57df3046-2f14-4bb8-93e9-84a9c8b46791

ATTACK:mobile:S9004 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--967e0bbc-879c-49b9-809b-cd55861709bd

ThreatFabric_Crocodilus_March2025

ATTACK:mobile:S0480 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e7b33eb5-6c2e-4743-ac8d-c27d5e7121ac

Threat Fabric Cerberus

ATTACK:mobile:S1092 → uses → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ec734b52-a823-495c-9684-c4649269723e

Bleeipng Computer Escobar

ATTACK:mobile:M1002 → mitigates → ATTACK:mobile:T1630.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fdf06a0b-08d2-4cac-9d49-b3f1454ec4ea

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.