自动化接入 · API / MCP EN

技术说明 · T1573

Encrypted Channel

Adversaries may employ an encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.

ATT&CK T1573 platforms — 状态 有效 版本 20.1

Adversaries may employ an encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.

使用该技术的组织

组织名称国家
grp_g0081Tropic Trooper—
grp_g0059Magic HoundIran
grp_g0016APT29Russia
grp_g1002BITTERPakistan

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核;置信度与有效期按引用读取。