Adversaries may use fallback or alternate communication channels if the primary channel is compromised or inaccessible in order to maintain reliable command and control and to avoid data transfer thresholds.
Groups using this technique
| Group | Name | Country |
|---|---|---|
| grp_g0032 | Lazarus Group | DPRK |
| grp_g1048 | UNC3886 | — |
| grp_g0049 | OilRig | Iran |
| grp_g0046 | FIN7 | — |
| grp_g0096 | APT41 | China |
Claims
No public claim points at this technique yet.
Auto-ingested and not human-reviewed; confidence and validity read by citation.