Stealth Mango

MITRE ATT&CK: S0328 View on attack.mitre.org

Aliases: Stealth Mango

First seen
2018-04-01 00:00:00
Malware type
spyware
Family
Malware family
Operating systems
android
Profile updated
2026-07-07 12:54:30

Targeted industries: government-and-public-sector healthcare-and-pharmaceutical defense-and-aerospace

Context

Stealth Mango is Android malware that has reportedly been used to successfully compromise the mobile devices of government officials, members of the military, medical professionals, and civilians. The iOS malware known as Tangelo is believed to be from the same developer.

Malware & tools used

  • Video Capture (attack-pattern)
  • Audio Capture (attack-pattern)
  • Call Log (attack-pattern)
  • SMS Control (attack-pattern)
  • Out of Band Data (attack-pattern)
  • Calendar Entries (attack-pattern)
  • Compromise Software Supply Chain (attack-pattern)
  • Contact List (attack-pattern)
  • System Network Configuration Discovery (attack-pattern)
  • Software Discovery (attack-pattern)
  • Location Tracking (attack-pattern)
  • Drive-By Compromise (attack-pattern)
  • Data from Local System (attack-pattern)
  • SMS Messages (attack-pattern)

Reports & references

  • lookout.com — Stealth Mango (report)
  • malpedia.caad.fkie.fraunhofer.de — Apk.Stealthmango (report)
  • lookout.com — Stealth Mango Report Ty (report)
  • MITRE ATT&CK — S0328 (report)
  • info.lookout.com — Lookout Stealth Mango Srr Us (report)

External references