自动化接入 · API / MCP EN

技术说明 · T1052.001

Exfiltration over USB

Adversaries may attempt to exfiltrate data over a USB connected physical device. In certain circumstances, such as an air-gapped network compromise, exfiltration could occur via a USB device introduced by a user. The USB device could be used as the final exfiltration point or to hop between otherwise disconnected systems.

ATT&CK T1052.001 platforms — 状态 有效 版本 20.1

Adversaries may attempt to exfiltrate data over a USB connected physical device. In certain circumstances, such as an air-gapped network compromise, exfiltration could occur via a USB device introduced by a user. The USB device could be used as the final exfiltration point or to hop between otherwise disconnected systems.1

  1. A USB data exfiltration case study

使用该技术的组织

组织名称国家
grp_g0129Mustang PandaChina
grp_g0081Tropic Trooper—

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核;置信度与有效期按引用读取。