Concipit1248 - S0426 (89c3dbf6-f281-41b7-be1d-a0e641014853)

Concipit1248 is iOS spyware that was discovered using the same name as the developer of the Android spyware Corona Updates. Further investigation revealed that the two pieces of software contained the same C2 URL and similar functionality.(Citation: TrendMicro Coronavirus Updates)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Video Capture - T1512 (d8940e76-f9c1-4912-bea6-e21c251370b6)	Attack Pattern	Concipit1248 - S0426 (89c3dbf6-f281-41b7-be1d-a0e641014853)	Malware	1
Data from Local System - T1533 (e1c912a9-e305-434b-9172-8a6ce3ec9c4a)	Attack Pattern	Concipit1248 - S0426 (89c3dbf6-f281-41b7-be1d-a0e641014853)	Malware	1
Web Protocols - T1437.001 (2282a98b-5049-4f61-9381-55baca7c1add)	Attack Pattern	Concipit1248 - S0426 (89c3dbf6-f281-41b7-be1d-a0e641014853)	Malware	1
Application Layer Protocol - T1437 (6a3f6490-9c44-40de-b059-e5940f246673)	Attack Pattern	Web Protocols - T1437.001 (2282a98b-5049-4f61-9381-55baca7c1add)	Attack Pattern	2