MazarBOT

MazarBOT is Android malware that was distributed via SMS in Denmark in 2016. ^[1]

ID: S0303

ⓘ

Type: MALWARE

Version: 1.0

Created: 25 October 2017

Last Modified: 02 September 2026

Techniques Used

Domain	ID		Name	Use
Mobile	T1476		Deliver Malicious Application via Other Means	MazarBOT has been delivered via an unsolicited text message containing a link to a web download URI.^[1]
Mobile	T1643		Generate Traffic from Victim	MazarBOT can send messages to premium-rate numbers.^[1]
Mobile	T1636	.004	Protected User Data: SMS Messages	MazarBOT can intercept two-factor authentication codes sent by online banking apps.^[1]