Summary: The GSM Association’s Fraud and Security Group (FASG) has released the Mobile Threat Intelligence Framework (MoTIF), which provides a structured approach to understanding and combating mobile network-related attacks.
Threat Actor: N/A
Victim: N/A
Key Point :
- The Mobile Threat Intelligence Framework (MoTIF) is a new framework developed by the GSM Association’s Fraud and Security Group (FASG) to describe mobile network-related attacks.
- MoTIF focuses on attacks that are not covered by existing frameworks like MITRE ATT&CK and MITRE FiGHT, and includes all generations of mobile networks and future technology evolutions.
- The framework also covers fraud attacks against mobile networks and their customers.
- MoTIF provides an overview of the framework and defines the techniques and sub-techniques used in mobile network attacks.
- The framework can be represented in STIX, a structured language for describing cyber threat information.
GSM Association’s Fraud and Security Group (FASG) has published the first version of a framework for describing, in a structured way, how adversaries attack and use mobile networks, based on the tactics, techniques and procedures (TTPs) that they use.
The Mobile Threat Intelligence Framework (MoTIF) is focused on mobile network-related attacks that are not already covered by existing public frameworks like MITRE ATT&CK (for Enterprise and for Mobile) and MITRE FiGHT.
In scope are 2G, 3G, 4G, 5G, including all kind of telecommunication service enablers (e.g., roaming, SMS, VoIP) and future mobile technology evolutions. Fraud attacks against mobile networks and their customers are also included.
MoTIF Principles provides an overview of MoTIF and defines the techniques and sub-techniques designated in the framework.
It also describes how MoTIF can be represented in STIX, a structured language for describing cyber threat information.
Must read: 10 cybersecurity frameworks you need to know about
Source: https://www.helpnetsecurity.com/2024/04/10/gsma-mobile-threat-intelligence-framework/
“An interesting youtube video that may be related to the article above”