Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/T1646
MITRE ATT&CK Technique

T1646: Exfiltration Over C2 Channel

ShareXLinkedInRedditHN

Adversaries may steal data by exfiltrating it over an existing command and control channel. Stolen data is encoded into the normal communications channel using the same protocol as command and control communications.

Tactics
Exfiltration
Platforms
Android, iOS

▪Software using this technique (28)

S0326RedDropmalwareS0399PallasmalwareS0418ViceLeakermalwareS0421GolfSpymalwareS0424TriadamalwareS0490XLoader for iOSmalwareS0507eSurvmalwareS0551GoldenEaglemalwareS1054DrinikmalwareS1055SharkBotmalwareS1061AbstractEmumalwareS1067FluBotmalwareS1077HornbillmalwareS1079BOULDSPYmalwareS1080FakecallsmalwareS1082SunbirdmalwareS1083ChameleonmalwareS1093FlyTrapmalwareS1094BRATAmalwareS1095AhRatmalwareS1185LightSpymalwareS1215Binary ValidatormalwareS1225CherryBlosmalwareS1231GodFathermalwareS1241RatMiladmalwareS9004CrocodilusmalwareS9005DocSwapmalwareS9006VajraSpymalware

▪Reference

T1646on MITRE ATT&CK

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.