Non-Application Layer Protocol T1095
Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive. Specific examples include use of network layer protocols, such as the Internet Control Message Protocol…
- Tactics
- Command and Control
- Actors using it
- 13
- Sub-techniques
- 0
Threat actors
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- Salt TyphoonChina · 43 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- HAFNIUMChina · Operation Exchange Marauder, Silk Typhoon · 37 techniques
- UNC3886China · 37 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- ToddyCat24 techniques
- BITTERT-APT-17 · 16 techniques
- BackdoorDiplomacy13 techniques
- PLATINUM10 techniques
- Metador8 techniques