T1008 — Fallback Channels

provenance: imported · ATT&CK: T1008

T1008: Fallback Channels

MITRE ATT&CK® Enterprise technique


Tactics	Command And Control
Platforms	ESXi, Linux, macOS, Windows
Permissions required	—
Version	1.1

Description

Adversaries may use fallback or alternate communication channels if the primary channel is compromised or inaccessible in order to maintain reliable command and control and to avoid data transfer thresholds.

Detection

(no detection guidance published)

Data sources

(none listed)

References

ATT&CK page: https://attack.mitre.org/techniques/T1008
ATT&CK Enterprise matrix: https://attack.mitre.org/matrices/enterprise/