Exfiltration Over C2 Channel T1041
Adversaries may steal data by exfiltrating it over an existing command and control channel. Stolen data is encoded into the normal communications channel using the same protocol as command and control communications.
- Tactics
- Exfiltration
- Actors using it
- 28
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- ChimeraChina · 49 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- BlackByteHecamede · 44 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium · 37 techniques
- Contagious InterviewDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan · 34 techniques
- GALLIUMChina · Granite Typhoon · 27 techniques
- ZIRCONIUMChina · APT31, Violet Typhoon · 25 techniques
- HigaisaSouth Korea · 24 techniques
- LuminousMothChina · 24 techniques
- Winter VivernTA473, UAC-0114 · 22 techniques
- WIRTEAshen Lepus · 21 techniques
- AgriusIran · Pink Sandstorm, AMERICIUM, Agonizing Serpens · 20 techniques
- ConfuciusConfucius APT · 16 techniques
- CURIUMIran · Crimson Sandstorm, TA456, Tortoise Shell · 15 techniques
- Stealth Falcon13 techniques