Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/T1636/T1636.004
MITRE ATT&CK Sub-Technique

T1636.004: SMS Messages

ShareXLinkedInRedditHN

Adversaries may utilize standard operating system APIs to gather SMS messages. On Android, this can be accomplished using the SMS Content Provider. iOS provides no standard API to access SMS messages. If the device has been jailbroken or rooted, an adversary may be able to access [SMS Messages](https://attack.mitre.org/techniques/T1636/004) without the user’s knowledge or approval.

Tactics
Collection
Platforms
Android, iOS

▪Parent technique

T1636: Protected User Data

▪Mitigations (1)

M1011User Guidance

Describes any guidance or training given to users to set particular configuration settings or avoid specific potentially risky behaviors.

▪Used by groups (1)

G0112Windshift

▪Software using this technique (71)

S0182FinFishermalwareS0289Pegasus for iOSmalwareS0292AndroRATmalwareS0295RCSAndroidmalwareS0298XbottoolS0301DendroidmalwareS0303MazarBOTmalwareS0304Android/Chuli.AmalwareS0305SpyNote RATmalwareS0309AdupsmalwareS0313RuMMSmalwareS0318XLoader for AndroidmalwareS0320DroidJackmalwareS0324SpyDealermalwareS0328Stealth MangomalwareS0329TangelomalwareS0399PallasmalwareS0403RiltokmalwareS0405ExodusmalwareS0406GustuffmalwareS0408FlexiSpytoolS0411RotexymalwareS0418ViceLeakermalwareS0421GolfSpymalwareS0423GinpmalwareS0424TriadamalwareS0425Corona UpdatesmalwareS0427TrickMomalwareS0432BreadmalwareS0463INSOMNIAmalwareS0478EventBotmalwareS0480CerberusmalwareS0485MandrakemalwareS0489WolfRATmalwareS0505Desert ScorpionmalwareS0506ViperRATmalwareS0509FakeSpymalwareS0522ExobotmalwareS0529CarbonStealmalwareS0535Golden CupmalwareS0536GPlayedmalwareS0539Red Alert 2.0malwareS0540AsacubmalwareS0544HenBoxmalwareS0549SilkBeanmalwareS0550DoubleAgentmalwareS0551GoldenEaglemalwareS0558Tiktok PromalwareS0577FrozenCellmalwareS0655BusyGaspermalwareS1054DrinikmalwareS1055SharkBotmalwareS1061AbstractEmumalwareS1062S.O.V.A.malwareS1067FluBotmalwareS1069TangleBotmalwareS1079BOULDSPYmalwareS1080FakecallsmalwareS1083ChameleonmalwareS1092EscobarmalwareS1126PhenakitemalwareS1128HilalRATmalwareS1185LightSpymalwareS1195SpyC23malwareS1214Android/SpyAgentmalwareS1231GodFathermalwareS1241RatMiladmalwareS1243DCHSpymalwareS9004CrocodilusmalwareS9005DocSwapmalwareS9006VajraSpymalware

▪Reference

T1636.004on MITRE ATT&CK

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.