Application Layer Protocol T1071
Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.…
- Tactics
- Command and Control
- Actors using it
- 67
- Sub-techniques
- 3
Ransomware groups reported using it
thegentlemenincransomakirarhysidaeverestMajinahanashiOrovapearnightspireclopnitrogen
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- Medusa Group52 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- ChimeraChina · 49 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- BlackByteHecamede · 44 techniques
- Salt TyphoonChina · 43 techniques
- TeamTNT43 techniques
- FIN13Elephant Beetle · 42 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- HAFNIUMChina · Operation Exchange Marauder, Silk Typhoon · 37 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- Contagious InterviewDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan · 34 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RedCurlRussia · 32 techniques
- FIN8Syssphinx · 31 techniques
- RockeChina · 29 techniques
- APT42Iran · 29 techniques
- Cobalt GroupGOLD KINGSWOOD, Cobalt Gang, Cobalt Spider · 26 techniques
- APT37North Korea · InkySquid, ScarCruft, Reaper · 25 techniques
- INC RansomGOLD IONIC · 25 techniques
- HigaisaSouth Korea · 24 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- LuminousMothChina · 24 techniques
- SidewinderIndia · T-APT-04, Rattlesnake · 23 techniques
- Moonstone SleetNorth Korea · Storm-1789 · 23 techniques
- APT33Iran · HOLMIUM, Elfin, Peach Sandstorm · 23 techniques
- Sea TurtleTürkiye · Teal Kurma, Marbled Dust, Cosmic Wolf · 22 techniques
- Winter VivernTA473, UAC-0114 · 22 techniques
- Velvet Ant22 techniques
- WIRTEAshen Lepus · 21 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- APT19China · Codoso, C0d0so0, Codoso Team · 18 techniques
- DaggerflyChina · Evasive Panda, BRONZE HIGHLAND · 17 techniques
- ConfuciusConfucius APT · 16 techniques
- BITTERT-APT-17 · 16 techniques
- WindshiftBahamut · 14 techniques
- Stealth Falcon13 techniques
- LazyScripter13 techniques
- APT18TG-0416, Dynamite Panda, Threat Group-0416 · 11 techniques
- Dark CaracalLebanon · 11 techniques
- TA551GOLD CABIN, Shathak · 11 techniques
- FIN49 techniques
- Metador8 techniques
- Rancor8 techniques
- RedEchoChina · 5 techniques
- Orangeworm2 techniques
- SilverTerrierNigeria · 2 techniques