自动化接入 · API / MCP EN

技术说明 · T1020

Automated Exfiltration

Adversaries may exfiltrate data, such as sensitive documents, through the use of automated processing after being gathered during Collection. When automated exfiltration is used, other exfiltration techniques likely apply as well to transfer the information out of the network, such as Exfiltration Over C2 Channel and Exfiltration Over Alternative Protocol.

ATT&CK T1020 platforms — 状态 有效 版本 20.1

Adversaries may exfiltrate data, such as sensitive documents, through the use of automated processing after being gathered during Collection.1 When automated exfiltration is used, other exfiltration techniques likely apply as well to transfer the information out of the network, such as Exfiltration Over C2 Channel and Exfiltration Over Alternative Protocol.

  1. ESET Gamaredon June 2020

使用该技术的组织

组织名称国家
grp_g1035Winter Vivern—
grp_g0004Ke3chang—
grp_g1039RedCurlRussia
grp_g0081Tropic Trooper—
grp_g0047Gamaredon GroupRussia
grp_g0094KimsukyDPRK
grp_g0121SidewinderIndia

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核；置信度与有效期按引用读取。