Data Theft

Description	The 'data theft' Capability indicates that the malware instance is able to steal data from the system on which it executes. This includes data stored in some form, e.g. in a file, as well as data that may be entered into some application such as a web-browser.
Relationships	Parent of Steal Stored Information Parent of Steal Serial Numbers Parent of Steal Documents Parent of Steal Database Content Parent of Steal Cryptocurrency Data Parent of Steal Images Parent of Steal User Data Parent of Steal Dialed Phone Numbers Parent of Steal Email Data Parent of Steal SMS Database Parent of Steal Browser Cache Parent of Steal Browser History Parent of Steal Referrer URLs Parent of Steal Contact List Data Parent of Log Activity Parent of Steal Authentication Credentials Parent of Steal Web/Network Credential Parent of Steal Password Hash Parent of Steal PKI Key Parent of Steal Cookie Parent of Steal PKI Software Certificate
References
Examples