Tangelo

MITRE ATT&CK: S0329 View on attack.mitre.org

Aliases: Tangelo

First seen
2018-04-01 00:00:00
Malware type
spyware
Family
Malware family
Operating systems
ios
Profile updated
2026-07-07 15:28:16

Targeted industries: government-and-public-sector technology-and-telecommunications

Context

Tangelo is iOS malware that is believed to be from the same developers as the Stealth Mango Android malware. It is not a mobile application, but rather a Debian package that can only run on jailbroken iOS devices.

Malware & tools used

  • SMS Messages (attack-pattern)
  • System Network Configuration Discovery (attack-pattern)
  • Call Log (attack-pattern)
  • Location Tracking (attack-pattern)
  • Stored Application Data (attack-pattern)
  • Audio Capture (attack-pattern)
  • Data from Local System (attack-pattern)

Reports & references

  • info.lookout.com — Lookout Stealth Mango Srr Us (report)
  • MITRE ATT&CK — S0329 (report)

External references