MITRE ATT&CK technique · Exfiltration

`T1567.004` Exfiltration Over Webhook

Sub-technique of T1567 Exfiltration Over Web Service

Adversaries may exfiltrate data to a webhook endpoint rather than over their primary command and control channel. Webhooks are simple mechanisms for allowing a server to push data over HTTP/S to a client without the need for the client to continuously poll the server.(Citation: RedHat Webhooks) Many public and commercial services, such as Discord, Slack, and `webhook.site`, support the creation…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

Shai-Hulud

Sigma rules to hunt it

SigmaHQ has no rules for this technique.

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.