MITRE ATT&CK technique · Command and Control

`T1573.002` Asymmetric Cryptography

Sub-technique of T1573 Encrypted Channel

Adversaries may employ a known asymmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Asymmetric cryptography, also known as public key cryptography, uses a keypair per party: one public that can be freely distributed, and one private. Due to how the keys are generated, the sender encrypts data…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

ShinyHunters
CyclopsBlink

Sigma rules to hunt it

SigmaHQ has no rules for this technique.

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.