#T1567 Exfiltration Over Web Service
Technique
- Tactics: Exfiltration
- Description:
Adversaries may use an existing, legitimate external Web service to exfiltrate data rather than their primary command and control channel. Popular Web services acting as an exfiltration mechanism may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to compromise. Firewall rules may also already exist to permit traffic to these services.
Web service providers also commonly use SSL/TLS encryption, giving adversaries an added level of protection.
- First Seen: Lazarus Group • 2017-05-31
-
15
Tagged Reports
-
13
Unique Authors
-
3,285
Active Days
Tagged Reports
2026-04-17
Break Glass Intelligence
2023-01-31
ESET
2019-08-26
MITRE
2017-05-31
MITRE