Virtualization Solution

Technique · ATTACK:mobile:T1670

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:mobile:T1670",
  "title": "Virtualization Solution",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1670",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--8e097ec5-1755-41d6-807c-3882442b818a",
  "external_id": "T1670",
  "domain": "mobile",
  "created": "2025-03-14T17:56:26.095Z",
  "modified": "2025-03-14T17:56:26.095Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [
    "defense-evasion"
  ],
  "source_references": [
    {
      "source_name": "Android AVF Overview",
      "url": "https://source.android.com/docs/core/virtualization"
    },
    {
      "source_name": "Android Application Sandbox",
      "url": "https://source.android.com/docs/security/app-sandbox"
    }
  ]
}

Explicit source assertions (3)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:mobile:S1231 → uses → ATTACK:mobile:T1670

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--12e68fcd-83d4-43a7-bf89-a2550ecfbed1

ZimperiumOrtegaPratapagiri_GodFather_Jun2025

ATTACK:mobile:S1208 → uses → ATTACK:mobile:T1670

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6bac4ccd-d810-40f4-937e-3ac4bfa959ec

Promon FjordPhantom Oct2024

ATTACK:mobile:M1011 → mitigates → ATTACK:mobile:T1670

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ec74ab89-4a60-4ab2-a92f-4c5c3b7552a4

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.