MITRE ATT&CK Mobile T1630.002: File Deletion (Mobile Tactic TA0030 - Defense Evasion)

What MITRE ATT&CK Mobile T1630.002: File Deletion (Mobile Tactic TA0030 - Defense Evasion) requires

MITRE ATT&CK T1630.002 (File Deletion) is an ATT&CK for Mobile Defense Evasion sub-technique of T1630 (Indicator Removal on Host). Adversaries may wipe a device or delete individual files in order to manipulate external outcomes or hide activity. An application must have administrator access to fully wipe the device, while individual files may not require special permissions to delete depending on their storage location. Stored data could include a variety of file formats, such as Office files, databases, stored emails, and custom file formats. Affected platforms: Android. MITRE-documented mitigations include M1011 User Guidance. Mobile controls map to NIST SP 800-124 Rev 2 and OWASP MASVS.

Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated: 2026-05-25

Primary source: https://attack.mitre.org/techniques/T1630/002/

SHA-256 integrity: 2cda678ed893e02a19ae5494e017ac84febd54ccc5f5e7d2addbdef139d765ff

Primary Citations — 6 traced to source

• MITRE ATT&CK for Mobile Technique T1630.002: File Deletion (https://attack.mitre.org/techniques/T1630/002/)
• MITRE ATT&CK Mobile Tactic TA0030: Defense Evasion (https://attack.mitre.org/tactics/TA0030/)

+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

• Discovery (free): /api/v1/nodes/mitre-attack-mobile-t1630-002-file-deletion.json — 6-field metadata
• Vault (full node): /api/v1/vault/nodes/mitre-attack-mobile-t1630-002-file-deletion.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
• Canonical URL: https://bidda.com/intelligence/mitre-attack-mobile-t1630-002-file-deletion
• Back to registry: Browse all 10,085 compliance nodes