T1008 - Fallback Channels
Tactics:
Command and Control
Command and Control
Platforms:
Linux Windows macOS ESXi
Linux Windows macOS ESXi
Detection:
Not specified
Not specified
Description:
Adversaries may use fallback or alternate communication channels if the primary channel is compromised or inaccessible in order to maintain reliable command and control and to avoid data transfer thresholds.
Used by Actors (5)
Malware (20)
TrickBot other
Bumblebee other
Stuxnet other
Exaramel for Linux other
WinMM other
RainyDay other
AppleSeed other
TinyTurla other
SslMM other
Machete other
HOPLIGHT other
InvisiMole other
QUIETEXIT other
RDAT other
Kazuar other
NETEAGLE other
FatDuke other
BlackEnergy other
ShimRat other
MiniDuke other
Metadata
| MITRE ID: | T1008 |
| STIX ID: | attack-pattern--f24faf46-3b26-... |
| Platforms: | Linux, Windows, macOS, ESXi |
| Created: | 13/01/2026 17:48 |
| Updated: | 06/03/2026 16:00 |