aol.pm

Endpoint Denial of Service

Technique · ATTACK:mobile:T1642

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:mobile:T1642",
  "title": "Endpoint Denial of Service",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1642",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--eb6cf439-1bcb-4d10-bc68-1eed844ed7b3",
  "external_id": "T1642",
  "domain": "mobile",
  "created": "2022-04-06T13:52:05.619Z",
  "modified": "2025-10-24T17:49:33.803Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [
    "impact"
  ],
  "source_references": [
    {
      "source_name": "Xiao-KeyRaider",
      "url": "http://researchcenter.paloaltonetworks.com/2015/08/keyraider-ios-malware-steals-over-225000-apple-accounts-to-create-free-app-utopia/"
    },
    {
      "source_name": "Android resetPassword",
      "url": "https://developer.android.com/reference/android/app/admin/DevicePolicyManager.html#resetPassword(java.lang.String,%20int)"
    }
  ]
}

Explicit source assertions (7)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S0298 → uses → ATTACK:mobile:T1642

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1218ed50-bd44-4f37-baba-1aae998b5a1f

PaloAlto-Xbot

ATTACK:mobile:S0536 → uses → ATTACK:mobile:T1642

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5e95ca90-bf75-4031-a28f-f8565c02185c

Talos GPlayed

ATTACK:mobile:S0323 → uses → ATTACK:mobile:T1642

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--69bb264a-3f44-4132-9248-dd80a9f5efa2

CheckPoint-Charger

ATTACK:mobile:M1006 → mitigates → ATTACK:mobile:T1642

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--79c3fe5d-585b-401a-8bb4-84bfdc7252a1

ATTACK:mobile:S1185 → uses → ATTACK:mobile:T1642

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a26a09cd-1718-403f-99f3-fdb127ac3599

LinkedIn Dmitry LightSpy 2025

ATTACK:mobile:M1011 → mitigates → ATTACK:mobile:T1642

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a3c4b392-2879-4f31-9431-3398e034851b

ATTACK:mobile:S0522 → uses → ATTACK:mobile:T1642

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cbb48fa1-0677-4a07-bdbf-eda1827e52f1

Threat Fabric Exobot

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.