TACTIC: COMMAND AND CONTROL

Proxy (T1090): real cases

MITRE Definition ↗
Adversaries route network communications through intermediate proxy chains or Tor to hide origin IP addresses.

Key Facts

Technique ID
T1090
Command and Control
Mapped Cases
6
Primary sources
Related Laws
0
Criminal statutes
  • ATT&CK Technique Identifier: T1090.
  • Tactical Phase: Command and Control.
  • Substantiated in 6 primary court prosecution cases.
  • Every associated case includes verbatim evidentiary excerpts from indictments or sworn affidavits.

Verified Evidentiary Case Records

Primary Source Evidence Excerpt: Plea Agreement ¶ 6, Page 7
"Bitzlato operated with negligible anti-money laundering controls, advertising that users could open accounts with no identity verification via Tor."
U.S. District Court for the Eastern District of New York View full case dossier →
Primary Source Evidence Excerpt: Criminal Complaint ¶ 8, Page 4
"ChipMixer chopped up Bitcoin deposits into fixed small denomination chips and redistributed them through multiple dummy wallets to defeat blockchain tracing."
U.S. District Court for the Eastern District of Pennsylvania View full case dossier →
Primary Source Evidence Excerpt: Plea Agreement ¶ 5, Page 4
"Barriss routed VoIP phone communications through anonymous proxies and spoofing apps to simulate local caller ID numbers during emergency calls."
U.S. District Court for the District of Kansas View full case dossier →
Primary Source Evidence Excerpt: Criminal Complaint ¶ 8, Page 4
"Operated hidden onion services over the Tor network equipped with automated cryptocurrency escrow mechanisms."
U.S. District Court for the Southern District of New York View full case dossier →
Primary Source Evidence Excerpt: Indictment ¶ 16, Page 9
"QQAAZZ used hundreds of bank accounts opened in the names of fake shell companies to rapidly layer stolen wire funds before converting them into Bitcoin."
U.S. District Court for the Western District of Pennsylvania View full case dossier →
Primary Source Evidence Excerpt: Indictment ¶ 8, Page 4
"Ulbricht built Silk Road as a hidden service on the Tor network to conceal server IP addresses and protect buyer and seller anonymity."
U.S. District Court for the Southern District of New York View full case dossier →