What MITRE ATT&CK Mobile T1632.001: Code Signing Policy Modification (Mobile Tactic TA0030 - Defense Evasion) requires
MITRE ATT&CK T1632.001 (Code Signing Policy Modification) is an ATT&CK for Mobile Defense Evasion sub-technique of T1632 (Subvert Trust Controls). Adversaries may modify code signing policies to enable execution of applications signed with unofficial or unknown keys. Code signing provides a level of authenticity on an app from a developer, guaranteeing that the program has not been tampered with and comes from an official source. Security controls can include enforcement mechanisms to ensure that only valid, signed code can be run on a device. Affected platforms: Android, iOS. MITRE-documented mitigations include M1012 Enterprise Policy, M1006 Use Recent OS Version, M1011 User Guidance. Mobile controls map to NIST SP 800-124 Rev 2 and OWASP MASVS.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1632/001/
SHA-256 integrity: 0a172a2bd8f2da3064be4b99c194d569d8c77e7f04c29b1e328b58883fc474c6
Primary Citations — 6 traced to source
- MITRE ATT&CK for Mobile Technique T1632.001: Code Signing Policy Modification (https://attack.mitre.org/techniques/T1632/001/)
- MITRE ATT&CK Mobile Tactic TA0030: Defense Evasion (https://attack.mitre.org/tactics/TA0030/)
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-attack-mobile-t1632-001-code-signing-policy-modification.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-attack-mobile-t1632-001-code-signing-policy-modification.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-attack-mobile-t1632-001-code-signing-policy-modification
- Back to registry: Browse all 10,085 compliance nodes