自动化接入 · API / MCP EN

技术说明 · T1573.001

Symmetric Cryptography

Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Symmetric encryption algorithms use the same key for plaintext encryption and ciphertext decryption. Common symmetric encryption algorithms include AES, DES, 3DES, Blowfish, and RC4.

ATT&CK T1573.001 platforms — 状态 有效 版本 20.1

Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Symmetric encryption algorithms use the same key for plaintext encryption and ciphertext decryption. Common symmetric encryption algorithms include AES, DES, 3DES, Blowfish, and RC4.12

  1. Destination Certification
  2. Symmetric vs Asymmetric Cryptography

使用该技术的组织

组织名称国家
grp_g0100Inception—
grp_g0012DarkhotelSouth Korea
grp_g0038Stealth Falcon—
grp_g0128ZIRCONIUM—
grp_g0129Mustang PandaChina
grp_g0032Lazarus GroupDPRK
grp_g0064APT33Iran
grp_g0126Higaisa—
grp_g1039RedCurlRussia
grp_g1052Contagious Interview—
grp_g0069MuddyWater—
grp_g1017Volt Typhoon—
grp_g0060BRONZE BUTLER—
grp_g0007APT28Russia

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核；置信度与有效期按引用读取。