Compliance Node Overview
MITRE ATT&CK T1624 (Event Triggered Execution) is an ATT&CK for Mobile Persistence technique. Adversaries may establish persistence using system mechanisms that trigger execution based on specific events. Mobile operating systems have means to subscribe to events such as receiving an SMS message, device boot completion, or other device activities. Adversaries may abuse these mechanisms as a means of maintaining persistent access to a victim via automatically and repeatedly executing malicious code. ATT&CK documents 1 sub-technique: T1624.001 Broadcast Receivers. Affected platforms: Android. MITRE-documented mitigations include M1006 Use Recent OS Version. Mobile controls map to NIST SP 800-124 Rev 2 and OWASP MASVS.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1624/
SHA-256 integrity: 9f5b6b8d122dd9e5cb6170ef8eaa499045b26e7a6e8a7ac14a8270bdb3ce98ce
Primary Citations — 6 traced to source
- MITRE ATT&CK for Mobile Technique T1624: Event Triggered Execution (https://attack.mitre.org/techniques/T1624/) with 1 sub-techniques
- MITRE ATT&CK Mobile Tactic TA0028: Persistence (https://attack.mitre.org/tactics/TA0028/)
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
⚠ Important: Human Verification Required
Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.