Anthropic-Cybersecurity-Skills/skills/detecting-mobile-malware-behavior/references/standards.md

Standards Reference: Mobile Malware Detection

OWASP Mobile Top 10 2024

ID	Risk	Malware Relevance
M2	Inadequate Supply Chain Security	Trojanized apps, repackaged malware
M8	Security Misconfiguration	Excessive permissions enabling malware

NIST SP 800-163 Rev 1

• Section 5: Mobile app vetting for malware indicators
• Section 6: Enterprise mobile device management for malware prevention

MITRE ATT&CK Mobile Matrix

Tactic	Technique	Indicator
Initial Access	T1444: Masquerade as Legitimate App	App name/icon spoofing
Collection	T1412: Capture SMS Messages	SMS permission + network
Exfiltration	T1437: Standard Application Layer Protocol	HTTP POST to C2
Command and Control	T1437.001: Web Protocols	HTTPS beaconing
Impact	T1471: Data Encrypted for Impact	File encryption + ransom