Web Service T1102
Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites, cloud services, and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are…
- Tactics
- Command and Control
- Actors using it
- 34
- Sub-techniques
- 3
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- TeamTNT43 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium · 37 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RedCurlRussia · 32 techniques
- Fox KittenIran · UNC757, Parisite, Pioneer Kitten · 31 techniques
- FIN8Syssphinx · 31 techniques
- RockeChina · 29 techniques
- APT42Iran · 29 techniques
- HEXANELyceum, Siamesekitten, Spirlin · 29 techniques
- ZIRCONIUMChina · APT31, Violet Typhoon · 25 techniques
- APT37North Korea · InkySquid, ScarCruft, Reaper · 25 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- LazyScripter13 techniques
- EXOTIC LILY11 techniques
- CarbanakAnunak · 8 techniques
- POLONIUMLebanon · Plaid Rain · 7 techniques
- RTM7 techniques
- APT12China · IXESHE, DynCalc, Numbered Panda · 5 techniques