{
  "node_id": "mitre-attack-mobile-t1458-replication-through-removable-media",
  "title": "MITRE ATT&CK Mobile T1458: Replication Through Removable Media (Mobile Tactic TA0027 - Initial Access / TA0033 - Lateral Movement)",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-05-25",
  "bluf": "MITRE ATT&CK T1458 (Replication Through Removable Media) is an ATT&CK for Mobile Initial Access and Lateral Movement technique. Adversaries may move onto devices by exploiting or copying malware to devices connected via USB. In the case of Lateral Movement, adversaries may utilize the physical connection of a device to a compromised or malicious charging station or PC to bypass application store requirements and install malicious applications directly. In the case of Initial Access, adversaries may attempt to exploit the device via the connection to gain access to data stored on the device. Affected platforms: Android, iOS. MITRE-documented mitigations include M1003 Lock Bootloader, M1006 Use Recent OS Version, M1011 User Guidance, M1012 Enterprise Policy, M1001 Security Updates. Mobile controls map to NIST SP 800-124 Rev 2 and OWASP MASVS.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "mitre_d3fend"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-cybersecurity-framework-2-0",
    "iso-27001-2022",
    "nist-sp-800-53-r5",
    "cis-controls-v8",
    "mitre-attack-framework-v14"
  ],
  "primary_citations_count": 6
}