Command and Control / T1573.001
Symmetric Cryptography
Sub-technique / Enterprise ATT&CK
Official MITRE entryAdversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Symmetric encryption algorithms use the same key for plaintext encryption and ciphertext decryption. Common symmetric encryption algorithms include AES, DES, 3DES, Blowfish, and RC4.(Citation: Destination Certification)(Citation: Symmetric vs Asymmetric Cryptography)
Parent technique: T1573 Encrypted Channel