View on MITRE ATT&CK

T1132.001 - Standard Encoding

Sub-technique
Tactics:
Command and Control
Platforms:
ESXi Linux Windows macOS
Detection:
Not specified
Description:
Adversaries may encode data with a standard data encoding system to make the content of command and control traffic more difficult to detect. Command and control (C2) information can be encoded using a standard data encoding system that adheres to existing protocol specifications. Common data encoding schemes include ASCII, Unicode, hexadecimal, Base64, and MIME.(Citation: Wikipedia Binary-to-text Encoding)(Citation: Wikipedia Character Encoding) Some data encoding systems may also result in data compression, such as gzip.
Used by Actors (11)
APT19
Nation-state
APT33
Nation-state
Lazarus Group
Nation-state
MuddyWater
Nation-state
HAFNIUM
Unknown
APT42
Nation-state
Sandworm Team
Unknown
Patchwork
Unknown
BRONZE BUTLER
Unknown
Tropic Trooper
Unknown
TA551
Unknown
Malware (20)
TrickBot other BLINDINGCAN other Pikabot other Spark other Bumblebee other Torisma other Backdoor.Oldrea other Stuxnet other RotaJakiro other POWRUNER other Sardonic other Misdat other TAMECAT other Felismus other xCaon other Gomir other Emotet other Machete other Prikormka other Gootloader other
Metadata
MITRE ID: T1132.001
STIX ID: attack-pattern--04fd5427-79c7-...
Platforms: ESXi, Linux, Windows, macOS
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00