Encrypted Channel T1573
Adversaries may employ an encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are…
- Tactics
- Command and Control
- Actors using it
- 28
- Sub-techniques
- 1
Ransomware groups reported using it
Threat actors
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- Medusa Group52 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- ShinyHuntersUNC6240, Bling Libra · 39 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- Contagious InterviewDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan · 34 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RedCurlRussia · 32 techniques
- FIN8Syssphinx · 31 techniques
- APT42Iran · 29 techniques
- Cobalt GroupGOLD KINGSWOOD, Cobalt Gang, Cobalt Spider · 26 techniques
- ZIRCONIUMChina · APT31, Violet Typhoon · 25 techniques
- HigaisaSouth Korea · 24 techniques
- APT33Iran · HOLMIUM, Elfin, Peach Sandstorm · 23 techniques
- DarkhotelSouth Korea · DUBNIUM, Zigzag Hail · 22 techniques
- Velvet Ant22 techniques
- TA254120 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- BITTERT-APT-17 · 16 techniques
- Stealth Falcon13 techniques
- RedEchoChina · 5 techniques