Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/T1573/T1573.001
MITRE ATT&CK Sub-Technique

T1573.001: Symmetric Cryptography

ShareXLinkedInRedditHN

Adversaries may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Symmetric encryption algorithms use the same key for plaintext encryption and ciphertext decryption. Common symmetric encryption algorithms include AES, DES, 3DES, Blowfish, and RC4.

Tactics
Command and Control
Platforms
ESXi, Linux, macOS, Network Devices, Windows

▪Parent technique

T1573: Encrypted Channel

▪Mitigations (1)

M1031Network Intrusion Prevention

Use intrusion detection signatures to block traffic at network boundaries.

▪Used by groups (14)

G0007APT28G0012DarkhotelG0032Lazarus GroupG0038Stealth FalconG0060BRONZE BUTLERG0064APT33G0069MuddyWaterG0100InceptionG0126HigaisaG0128ZIRCONIUMG0129Mustang PandaG1017Volt TyphoonG1039RedCurlG1052Contagious Interview

▪Software using this technique (166)

S0003RIPTIDEmalwareS0009HikitmalwareS0010LuridmalwareS0011TaidoormalwareS0012PoisonIvymalwareS0013PlugXmalwareS0021DerusbimalwareS0022UroburosmalwareS0023CHOPSTICKmalwareS0030CarbanakmalwareS0032gh0st RATmalwareS0034NETEAGLEmalwareS0037HAMMERTOSSmalwareS0038DuqumalwareS0045ADVSTORESHELLmalwareS0050CosmicDukemalwareS0053SeaDukemalwareS0060Sys10malwareS00654H RATmalwareS00663PARA RATmalwareS0068httpclientmalwareS0074SakulamalwareS0076FakeMmalwareS0077CallMemalwareS0081ElisemalwareS0082EmissarymalwareS0087Hi-ZormalwareS0091EpicmalwareS0113PrikormkamalwareS0127BBSRATmalwareS0128BADNEWSmalwareS0132H1N1malwareS0134DowndelphmalwareS0137CORESHELLmalwareS0141Winnti for WindowsmalwareS0144ChChesmalwareS0148RTMmalwareS0149MoonWindmalwareS0153RedLeavesmalwareS0154Cobalt StrikemalwareS0159SNUGRIDEmalwareS0162KomplexmalwareS0168GazermalwareS0170HelminthmalwareS0171FelismusmalwareS0180VolgmermalwareS0181FALLCHILLmalwareS0187DaserfmalwareS0198NETWIREmalwareS0200DipsindmalwareS0203HydraqmalwareS0220ChaosmalwareS0230ZeroTmalwareS0234BandookmalwareS0244ComniemalwareS0245BADCALLmalwareS0254PLAINTEEmalwareS0256MosquitomalwareS0260InvisiMolemalwareS0262QuasarRATtoolS0266TrickBotmalwareS0268BisonalmalwareS0271KEYMARBLEmalwareS0272NDiskMonitormalwareS0275UPPERCUTmalwareS0284More_eggsmalwareS0333UBoatRATmalwareS0336NanoCoremalwareS0342GreyEnergymalwareS0344AzorultmalwareS0348Cardinal RATmalwareS0352OSX_OCEANLOTUS.DmalwareS0356KONNImalwareS0367EmotetmalwareS0371POWERTONmalwareS0377EburymalwareS0381FlawedAmmyymalwareS0384DridexmalwareS0394HiddenWaspmalwareS0395LightNeuronmalwareS0409MachetemalwareS0430Winnti for LinuxmalwareS0431HotCroissantmalwareS0433RifdoormalwareS0435PLEADmalwareS0436TSCookiemalwareS0438AttormalwareS0439OkrummalwareS0455MetamorfomalwareS0472down_newmalwareS0486BonadanmalwareS0495RDATmalwareS0501PipeMonmalwareS0512FatDukemalwareS0514WellMessmalwareS0520BLINDINGCANmalwareS0532LucifermalwareS0534BazarmalwareS0537HyperStackmalwareS0559SUNBURSTmalwareS0569ExplosivemalwareS0574BendyBearmalwareS0582LookBackmalwareS0586TAINTEDSCRIBEmalwareS0603StuxnetmalwareS0610SideTwistmalwareS0615SombRATmalwareS0627SodaMastermalwareS0629RainyDaymalwareS0630NebulaemalwareS0632GrimAgentmalwareS0633SlivertoolS0641KobalosmalwareS0649SMOKEDHAMmalwareS0650QakBotmalwareS0653xCaonmalwareS0658XCSSETmalwareS0661FoggyWebmalwareS0663SysUpdatemalwareS0664PandoramalwareS0670WarzoneRATmalwareS0674CharmPowermalwareS0678TorismamalwareS1022IceApplemalwareS1026MongallmalwareS1031PingPullmalwareS1034StrifeWatermalwareS1039BumblebeemalwareS1059metaMainmalwareS1060MafaldamalwareS1065Woody RATmalwareS1076QUIETCANARYmalwareS1078RotaJakiromalwareS1085SardonicmalwareS1099SamuraimalwareS1100NinjamalwareS1106NGLitemalwareS1110SLIGHTPULSEmalwareS1114ZIPLINEmalwareS1115WIREFIREmalwareS1119LIGHTWIREmalwareS1141LunarWebmalwareS1144FRPtoolS1145PikabotmalwareS1160LatrodectusmalwareS1166SolarmalwareS1169MangomalwareS1193TAMECATmalwareS1196Troll StealermalwareS1202LockBit 3.0malwareS1218VIRTUALPIEmalwareS1222RIFLESPINEmalwareS1223THINCRUSTmalwareS1224CASTLETAPmalwareS1226BOOKWORMmalwareS1227StarProxymalwareS1228PUBLOADmalwareS1229HavocmalwareS1239TONESHELLmalwareS9001SystemBCmalwareS9007HTTPTroymalwareS9019PureCryptermalwareS9020LODEINFOmalwareS9023HiddenFacemalwareS9032MuddyVipermalwareS9037RustyWatermalware

▪Reference

T1573.001on MITRE ATT&CK

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.