An adversary may exfiltrate data in fixed size chunks instead of whole files or limit packet sizes below certain thresholds. This approach may be used to avoid triggering network data transfer threshold alerts.1
- Chunked Encoding
使用该技术的组织
| 组织 | 名称 | 国家 |
|---|---|---|
| grp_g1014 | LuminousMoth | China |
| grp_g1040 | Play | — |
| grp_g0096 | APT41 | China |
| grp_g0007 | APT28 | Russia |
| grp_g0027 | Threat Group-3390 | China |
断言
尚无指向该技术的公开断言。
记录自动入库·未人工复核;置信度与有效期按引用读取。