MITRE ATT&CKsub-technique

T1521.001 Symmetric Cryptography

Published 2022-04-05 Modified 2025-10-24 Official page ↗
Domain
mobile
Tactics
Command And Control
Platforms
Android, iOS
Version
1.0
Created
2022-04-05

Description

Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic, rather than relying on any inherent protections provided by a communication protocol. Symmetric encryption algorithms use the same key for plaintext encryption and ciphertext decryption. Common symmetric encryption algorithms include AES, Blowfish, and RC4.

Related

Subtechnique of · MITRE ATT&CK (1)

  • T1521 Encrypted Channel technique

Tactic · MITRE ATT&CK (1)

  • TA0037 Command and Control tactic

Referenced by MITRE ATT&CK · uses (7)

  • C0054 Operation Triangulation campaign
  • S1216 TriangleDB software (malware)
  • C0033 C0033 campaign
  • S1055 SharkBot software (malware)
  • S0478 EventBot software (malware)
  • G0112 Windshift group
  • S0411 Rotexy software (malware)