ATT&CK · T1008
Fallback Channels
Tactics: command-and-control
About
Adversaries may use fallback or alternate communication channels if the primary channel is compromised or inaccessible in order to maintain reliable command and control and to avoid data transfer thresholds.
Platforms: ESXi, Linux, macOS, WindowsMITRE ATT&CK ↗
Used by actors
5 known groups
Software
49 malware/tools implement this
BISCUITDerusbiUroburosCHOPSTICKNETEAGLEJHUHUGITMiniDukeSslMMWinMMDustySkyMis-TypeS-TypeBlackEnergyXTunnelLinfoKwampirsInvisiMoleKazuarTrickBotQUADAGENTCardinal RATHOPLIGHTEburyExaramel for LinuxMacheteShimRatValakRDATPipeMonAnchorFatDukeBazarCrutchTAINTEDSCRIBEStuxnetSideTwistAppleSeedRainyDayGelsemiumTinyTurlaCharmPowerMythicSharkKevinBumblebeeQUIETEXITOilBoosterGlassWormHiddenFace
Corpus indicators tagged with this technique
21 indicators in the corpus carry T1008.