T1041 Exfiltration Over C2 Channel — ATT&CK Technique

Adversaries may steal data by exfiltrating it over an existing command and control channel. Stolen data is encoded into the normal communications channel using the same protocol as command and control communications.

Read the full analysis on IntelFusions