Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/Software/S1079
MITRE ATT&CK Malware

BOULDSPY (S1079)

ShareXLinkedInRedditHN

[BOULDSPY](https://attack.mitre.org/software/S1079) is an Android malware, detected in early 2023, with surveillance and remote-control capabilities. Analysis of exfiltrated C2 data suggests that [BOULDSPY](https://attack.mitre.org/software/S1079) primarily targeted minority groups in Iran.(Citation: lookout_bouldspy_0423)

Platforms: Android

▪Techniques implemented (25)

T1409Stored Application DataT1532Archive Collected DataT1407Download New Code at RuntimeT1429Audio CaptureT1636.003Contact ListT1422.002Wi-Fi DiscoveryT1414Clipboard DataT1422System Network Configuration DiscoveryT1646Exfiltration Over C2 ChannelT1513Screen CaptureT1437.001Web ProtocolsT1533Data from Local SystemT1426System Information DiscoveryT1655.001Match Legitimate Name or LocationT1644Out of Band DataT1636.002Call LogT1512Video CaptureT1417.001KeyloggingT1577Compromise Application ExecutableT1636.004SMS MessagesT1418Software DiscoveryT1422.001Internet Connection DiscoveryT1398Boot or Logon Initialization ScriptsT1624Event Triggered ExecutionT1430Location Tracking
S1079on MITRE ATT&CK →

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.