MITRE ATT&CKtechnique

T1532 Archive Collected Data

Published 2019-10-10 Modified 2025-10-24 Official page ↗
Domain
mobile
Tactics
Collection
Platforms
Android, iOS
Version
2.0
Created
2019-10-10

Description

Adversaries may compress and/or encrypt data that is collected prior to exfiltration. Compressing data can help to obfuscate its contents and minimize use of network resources. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender. Both compression and encryption are done prior to exfiltration, and can be performed using a utility, programming library, or custom algorithm.

Related

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · uses (14)

  • S1243 DCHSpy software (malware)
  • S1185 LightSpy software (malware)
  • C0033 C0033 campaign
  • S1094 BRATA software (malware)
  • S1082 Sunbird software (malware)
  • S1079 BOULDSPY software (malware)
  • S0577 FrozenCell software (malware)
  • S0540 Asacub software (malware)
  • S0535 Golden Cup software (malware)
  • S0505 Desert Scorpion software (malware)
  • S0422 Anubis software (malware)
  • S0421 GolfSpy software (malware)
  • S0405 Exodus software (malware)
  • S0424 Triada software (malware)