Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

Detects when the default SMS application on an Android device is changed to an application that is not recognized as a trusted SMS provider. This behavior is often indicative of malicious applications attempting to intercept incoming SMS messages, such as those containing multi-factor authentication (MFA) codes, by positioning themselves as the system's primary handler for SMS communications.
avatar
Ankit Mehta@Secvyn
Bharat Cyber Guardians
4 months ago
001
Detects when the default SMS application on an Android device is changed to an application that is not recognized as a trusted SMS provider. This behavior is often indicative of malicious applications attempting to intercept incoming SMS messages, such as those containing multi-factor authentication (MFA) codes, by positioning themselves as the system's primary handler for SMS communications.
avatar
Ankit Mehta@Secvyn
avatar
Detections.ai Community
4 months ago
000