Encrypted Channel: Symmetric Cryptography

ID Name
ATAGS-T1186.001 Symmetric Cryptography
ATAGS-T1186.002 Asymmetric Cryptography

Threat Actors may employ a known symmetric encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Symmetric encryption algorithms use the same key for plaintext encryption and ciphertext decryption. Common symmetric encryption algorithms include AES, DES, 3DES, Blowfish, and RC4.

ID: ATAGS-T1186.001
Sub-technique of:  ATAGS-T1186
Targeted Components: Network Transport
Responsibility: Provider
Created: 18 April 2026
Last Modified: 18 April 2026

Mitigations

This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.