MESSAGETAP

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[MESSAGETAP](https://attack.mitre.org/software/S0443) is a data mining malware family deployed by [APT41](https://attack.mitre.org/groups/G0096) into telecommunications networks to monitor and save SMS traffic from specific phone numbers, IMSI numbers, or that contain specific keywords. (Citation: FireEye MESSAGETAP October 2019)

Associated Techniques (8)

ID	ATT&CK	Tactics
T1040	Network Sniffing	-
T1049	System Network Connections Discovery	-
T1070.004	File Deletion	-
T1074.001	Local Data Staging	-
T1083	File and Directory Discovery	-
T1119	Automated Collection	-
T1140	Deobfuscate/Decode Files or Information	-
T1560.003	Archive via Custom Method	-

Used by Actors (1)

APT41
Nation-state

Metadata

ID:	443
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00