Adversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect. Command and control (C2) information can be encoded using a standard data encoding system that adheres to existing protocol specifications. Common data encoding schemes include ASCII, Unicode, hexadecimal, Base64, and MIME.12 Some data encoding systems may also result in data compression, such as gzip.
- Wikipedia Binary-to-text Encoding
- Wikipedia Character Encoding
使用该技术的组织
| 组织 | 名称 | 国家 |
|---|---|---|
| grp_g0127 | TA551 | — |
| grp_g0032 | Lazarus Group | DPRK |
| grp_g1045 | Salt Typhoon | — |
| grp_g0064 | APT33 | Iran |
| grp_g1044 | APT42 | Iran |
| grp_g0069 | MuddyWater | — |
| grp_g0073 | APT19 | China |
| grp_g0082 | APT38 | DPRK |
| grp_g0081 | Tropic Trooper | — |
| grp_g0125 | HAFNIUM | — |
| grp_g0060 | BRONZE BUTLER | — |
| grp_g0040 | Patchwork | — |
| grp_g0034 | Sandworm Team | Russia |
断言
尚无指向该技术的公开断言。
记录自动入库·未人工复核;置信度与有效期按引用读取。