Dynamic Resolution T1568
Adversaries may dynamically establish connections to command and control infrastructure to evade common detections and remediations. This may be achieved by using malware that shares a common algorithm with the infrastructure the adversary uses to receive the malware's communications. These…
- Tactics
- Command and Control
- Actors using it
- 13
- Sub-techniques
- 1
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- APT-C-36Blind Eagle, TAG-144, AguilaCiega · 25 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- TA254120 techniques
- BITTERT-APT-17 · 16 techniques
- Transparent TribePakistan · COPPER FIELDSTONE, APT36, Mythic Leopard · 12 techniques
- TA551GOLD CABIN, Shathak · 11 techniques
- RedEchoChina · 5 techniques
- APT12China · IXESHE, DynCalc, Numbered Panda · 5 techniques