TACTIC: COMMAND AND CONTROL
Web Service: Dead Drop Resolver (T1102): real cases
MITRE Definition ↗ Adversaries post command and control addresses on external forums or paste sites.
Key Facts
Technique ID
T1102
Command and Control
Mapped Cases
1
Primary sources
Related Laws
0
Criminal statutes
- ATT&CK Technique Identifier: T1102.
- Tactical Phase: Command and Control.
- Substantiated in 1 primary court prosecution cases.
- Every associated case includes verbatim evidentiary excerpts from indictments or sworn affidavits.
Verified Evidentiary Case Records
U.S. v. Yakubets & Turashev (Evil Corp / Dridex Banking Malware)
fugitive 2019-11-14
Primary Source Evidence Excerpt: CISA Technical Analysis Report
"Dridex used public social media profile pages and paste sites as dead drop resolvers to retrieve active C2 IP addresses."
U.S. District Court for the Western District of Pennsylvania
View full case dossier →