YARA
In telecommunications, YARA is an open pattern-matching engine widely used to identify and classify malware samples and suspicious files. Operators use YARA on artifacts pulled from compromised OAM hosts, NFs, and supply-chain components to recognize known toolkits.
Categories: Threats and Attacks
YARA in context
Telecom threats range from opportunistic SMS phishing and SIM swap to nation-state grade location tracking and lawful-interception abuse. The common thread is that most attacks exploit the inherited trust model of legacy signaling. SS7 and Diameter were designed for a closed operator community that no longer exists.
To place YARA in the wider telecom-security picture, review Vulnerability Assessment, UEBA, Threat Hunting (Telecom), SCP Abuse, Smishing and GSMA T-ISAC.
Related terms
Related topic hubs
- Diameter Attacks S6a IDR/PUR/CLR abuse, subscriber tracking, LTE signaling attacks.
More from the TelcoSec Glossary
Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.