Non-Standard Port T1571
Adversaries may communicate using a protocol and port pairing that are typically not associated (for example, HTTPS over port 8088 or port 587 as opposed to the traditional port 443). Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle…
- Tactics
- Command and Control
- Actors using it
- 19
- Sub-techniques
- 0
Threat actors
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- Salt TyphoonChina · 43 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- Contagious InterviewDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan · 34 techniques
- RockeChina · 29 techniques
- APT-C-36Blind Eagle, TAG-144, AguilaCiega · 25 techniques
- SilenceWhisper Spider · 25 techniques
- APT33Iran · HOLMIUM, Elfin, Peach Sandstorm · 23 techniques
- Velvet Ant22 techniques
- WIRTEAshen Lepus · 21 techniques
- DarkVishnya10 techniques
- RedEchoChina · 5 techniques