Twitoor

Twitoor is a dropper application capable of receiving commands from social media.^[1]

ID: S0302

ⓘ

Type: MALWARE

ⓘ

Platforms: Android

Version: 2.0

Created: 25 October 2017

Last Modified: 02 September 2026

Techniques Used

Domain	ID		Name	Use
Mobile	T1476		Deliver Malicious Application via Other Means	Twitoor has the ability to install adversary-specified applications.^[1]
Mobile	T1521		Encrypted Channel	Twitoor encrypts its C2 communication.^[1]
Mobile	T1628	.001	Hide Artifacts: Suppress Application Icon	Twitoor can hide its presence on the system.^[1]
Mobile	T1481	.003	Web Service: One-Way Communication	Twitoor can be controlled via Twitter.^[1]