MITRE ATT&CKtechnique

T1695 Block Communications

Published 2026-04-20 Modified 2026-10-13 Official page ↗

Domain: ics
Tactics: Inhibit Response Function
Platforms: Embedded, Windows, Linux, Network Devices
Version: 1.0
Created: 2026-04-20

Description

Operational technology communications occur over serial COM, Ethernet, Wi-Fi, cellular (4G/5G), and satellite mediums. Adversaries may block communications to prevent reporting messages and command messages from reaching their intended target devices disrupting processes, operations, and causing cyber-physical impacts. Adversaries may block communications by either making modifications to software (System Firmware, Module Firmware, Hooking, and Rootkit) and services (Service Stop, Denial of Service) on systems and devices or by positioning themselves between systems and devices and intercepting and blocking the communications such as the case with an Adversary-in-the-Middle attack.

Tactic · MITRE ATT&CK (1)

TA0107 Inhibit Response Function tactic

Referenced by MITRE ATT&CK · mitigates (3)

M0807 Network Allowlists mitigation
M0930 Network Segmentation mitigation
M0810 Out-of-Band Communications Channel mitigation

Referenced by MITRE ATT&CK · subtechnique of (3)

T1695.001 Serial COM sub-technique
T1695.002 Ethernet sub-technique
T1695.003 Wi-Fi sub-technique

Referenced by MITRE ATT&CK · uses (1)

G1027 CyberAv3ngers group

References

http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6142258 Bonnie Zhu, Anthony Joseph, Shankar Sastry 2011