eSurv

MITRE ATT&CK: S0507 View on attack.mitre.org

Aliases: eSurv

First seen
2019-01-01 00:00:00
Malware type
spyware
Family
Malware family
Operating systems
android, ios
Profile updated
2026-07-07 15:29:22

Targeted industries: government-and-public-sector

Context

eSurv is mobile surveillanceware designed for the lawful intercept market that was developed over the course of many years.

Malware & tools used

  • Geofencing (attack-pattern)
  • Audio Capture (attack-pattern)
  • Asymmetric Cryptography (attack-pattern)
  • Contact List (attack-pattern)
  • System Information Discovery (attack-pattern)
  • Data from Local System (attack-pattern)
  • Location Tracking (attack-pattern)
  • SSL Pinning (attack-pattern)
  • Exfiltration Over C2 Channel (attack-pattern)
  • Download New Code at Runtime (attack-pattern)

Reports & references

  • MITRE ATT&CK — S0507 (report)
  • blog.lookout.com — Esurv Research (report)

External references