value:  Some Brave Prince variants have used South Korea's Daum email service to exfiltrate information and later variants have posted the data to a web server via an HTTP post command. 
name: Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non