MITRE ATT&CKtechnique
T1008 Fallback Channels
- Domain
- enterprise
- Tactics
- Command And Control
- Platforms
- ESXi, Linux, macOS, Windows
- Version
- 1.1
- Created
- 2017-05-31
Description
Adversaries may use fallback or alternate communication channels if the primary channel is compromised or inaccessible in order to maintain reliable command and control and to avoid data transfer thresholds.
Related
Tactic · MITRE ATT&CK (1)
- TA0011 Command and Control tactic
Referenced by MITRE ATT&CK · mitigates (1)
- M1031 Network Intrusion Prevention mitigation
Referenced by MITRE ATT&CK · uses (58)
- S9063 DEEPROOT software (malware)
- S9043 Mini Shai-Hulud software (malware)
- S9041 TeamPCP Cloud Stealer software (malware)
- S9023 HiddenFace software (malware)
- S9010 GlassWorm software (malware)
- G1048 UNC3886 group
- S1172 OilBooster software (malware)
- S1084 QUIETEXIT software (malware)
- C0002 Night Dragon campaign
- S1039 Bumblebee software (malware)
- S1020 Kevin software (malware)
- S1019 Shark software (malware)
- S0699 Mythic software (tool)
- S0674 CharmPower software (malware)
- S0668 TinyTurla software (malware)
- S0666 Gelsemium software (malware)
- S0629 RainyDay software (malware)
- S0622 AppleSeed software (malware)
- S0610 SideTwist software (malware)
- S0586 TAINTEDSCRIBE software (malware)
- S0603 Stuxnet software (malware)
- S0538 Crutch software (malware)
- S0534 Bazar software (malware)
- S0512 FatDuke software (malware)
- S0504 Anchor software (malware)
- S0501 PipeMon software (malware)
- S0495 RDAT software (malware)
- S0476 Valak software (malware)
- S0444 ShimRat software (malware)
- G0096 APT41 group
Referenced by Compliance · mitigates (9)
- CIS-13.8 Deploy a Network Intrusion Prevention Solution CIS Safeguard v8.1
- NIST-AC-4 Information Flow Enforcement NIST 800-53 control
- NIST-CA-7 Continuous Monitoring NIST 800-53 control
- NIST-CM-2 Baseline Configuration NIST 800-53 control
- NIST-CM-6 Configuration Settings NIST 800-53 control
- NIST-CM-7 Least Functionality NIST 800-53 control
- NIST-SC-7 Boundary Protection NIST 800-53 control
- NIST-SI-3 Malicious Code Protection NIST 800-53 control
- NIST-SI-4 System Monitoring NIST 800-53 control