value:  The functionality that they all have in common is that each exfiltrates collected credentials and its bash command history as an encrypted bundle to servers they control. 
name: Exfiltration Over Alternative Protocol: Exfiltration Over Symmetric Encrypted Non