Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1628.001_suppress-application-icon
A malicious application could suppress its icon from being displayed to the user in the application launcher.
Passed 21 of 22 test cases with the skill, and 12 of 22 without it.
and 14 more in the full report
9 fixed12 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are performing a vulnerability mapping for Android malware hiding its launcher icon. Which Common Weakness Enumeration ID corresponds to this protection mechanism failure?
| Checked | Without skill | With skill |
|---|---|---|
| Maps the issue to CWE-693 Protection Mechanism Failure | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1628
A malicious application could suppress its icon from being displayed to the user in the application launcher. This hides the fact that it is installed, and can make it more difficult for the user to uninstall the application. Hiding the application's icon programmatically does not require any special permissions.
This behavior has been seen in the BankBot/Spy Banker family of malware.
Beginning in Android 10, changes were introduced to inhibit malicious applications’ ability to hide their icon. If an app is a system app, requests no permissions, or does not have a launcher activity, the application’s icon will be fully hidden. Further, if the device is fully managed or the application is in a work profile, the icon will be fully hidden. Otherwise, a synthesized activity is shown, which is a launcher icon that represents the app’s details page in the system settings. If the user clicks the synthesized activity in the launcher, they are taken to the application’s details page in the system settings.
Platforms: Android
Determine if the target mobile environment is susceptible to Suppress Application Icon by examining the target platforms (Android).
Review whether mitigations for T1628.001 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Android 10 introduced changes to prevent malicious applications from fully suppressing their icon in the launcher.
test cases passed, vs 12 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.