Janicab - S0163 (234e7770-99b0-4f65-b983-d3230f76a60b)

Janicab is an OS X trojan that relied on a valid developer ID and oblivious users to install it. (Citation: Janicab)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Janicab (c3c20c4b-e12a-42e5-960a-eea4644014f4)	Tool	Janicab - S0163 (234e7770-99b0-4f65-b983-d3230f76a60b)	Malware	1
Code Signing - T1553.002 (32901740-b42c-4fdd-bc02-345b5dc57082)	Attack Pattern	Janicab - S0163 (234e7770-99b0-4f65-b983-d3230f76a60b)	Malware	1
Cron - T1053.003 (2acf44aa-542f-4366-b4eb-55ef5747759c)	Attack Pattern	Janicab - S0163 (234e7770-99b0-4f65-b983-d3230f76a60b)	Malware	1
Janicab - S0163 (234e7770-99b0-4f65-b983-d3230f76a60b)	Malware	Audio Capture - T1123 (1035cdf2-3e5f-446f-a7a7-e8f6d7925967)	Attack Pattern	1
Janicab - S0163 (234e7770-99b0-4f65-b983-d3230f76a60b)	Malware	Screen Capture - T1113 (0259baeb-9f63-4c69-bf10-eb038c390688)	Attack Pattern	1
Janicab (c3c20c4b-e12a-42e5-960a-eea4644014f4)	Tool	Private Cluster (4af4e96f-c92d-4a45-9958-a88ad8deb38d)	Unknown	2
Janicab (c3c20c4b-e12a-42e5-960a-eea4644014f4)	Tool	Janicab (OS X) (01325d85-297f-40d5-b829-df9bd996af5a)	Malpedia	2
Code Signing - T1553.002 (32901740-b42c-4fdd-bc02-345b5dc57082)	Attack Pattern	Subvert Trust Controls - T1553 (b83e166d-13d7-4b52-8677-dff90c548fd7)	Attack Pattern	2
Cron - T1053.003 (2acf44aa-542f-4366-b4eb-55ef5747759c)	Attack Pattern	Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	2