What MITRE ATT&CK Mobile T1630.001: Uninstall Malicious Application (Mobile Tactic TA0030 - Defense Evasion) requires
MITRE ATT&CK T1630.001 (Uninstall Malicious Application) is an ATT&CK for Mobile Defense Evasion sub-technique of T1630 (Indicator Removal on Host). Adversaries may include functionality in malware that uninstalls the malicious application from the device. This can be achieved by: * Abusing device owner permissions to perform silent uninstallation using device owner API calls. * Abusing root permissions to delete files from the filesystem. * Abusing the accessibility service. This requires sending an intent to the system to request uninstallation, and then abusing the accessibility service to click the proper places on the screen to confirm uninstallation. Affected platforms: Android. MITRE-documented mitigations include M1001 Security Updates, M1011 User Guidance, M1002 Attestation. Mobile controls map to NIST SP 800-124 Rev 2 and OWASP MASVS.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1630/001/
SHA-256 integrity: bf4328c27979b52b15c69e7871cc0d82c932cb741d2f2803ef932281c7be3ca3
Primary Citations — 6 traced to source
- MITRE ATT&CK for Mobile Technique T1630.001: Uninstall Malicious Application (https://attack.mitre.org/techniques/T1630/001/)
- MITRE ATT&CK Mobile Tactic TA0030: Defense Evasion (https://attack.mitre.org/tactics/TA0030/)
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
⚠ Important: Human Verification Required
Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.