H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeTechnique
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

An adversary can leverage a computer's peripheral devices (e.g., microphones and webcams) or applications (e.g., voice and video call services) to capture audio recordings for the purpose of listening into sensitive conversations to gather information.(Citation: ESET Attor Oct 2019) Malware or scripts may be used to interact with the devices through an available API provided by the operating system or an application to capture audio. Audio files may be written to disk and exfiltrated later.

33 recorded

Relationships

mapped-toTechnique
uses
from APT37
Group
uses
from Attor
Malware
uses
from Bandook
Malware
usesMalware
usesMalware
uses
from Crimson
Malware
usesMalware
uses
from Derusbi
Malware
uses
from DOGCALL
Malware
usesMalware
uses
from Flame
Malware
usesTool
usesMalware
uses
from Janicab
Malware
uses
from jRAT
Malware
usesMalware
uses
from Machete
Malware
uses
from MacMa
Malware
uses
from MacSpy
Malware
uses
from MgBot
Malware
usesMalware
usesMalware
usesMalware
usesTool
uses
from Pupy
Tool
uses
from Remcos
Tool
usesMalware
uses
from ROKRAT
Malware
uses
from T9000
Malware
usesMalware
uses
from VERMIN
Malware
usesGroup
2 external

References

mitre-attack
T1123
open
ESET Attor Oct 2019
https://www.welivesecurity.com/wp-content/uploads/2019/10/ESET_Attor.pdf
open