value:  CORESHELL can communicate over SMTP and POP3 for C2. ;; Goopy has the ability to use a Microsoft Outlook backdoor macro to communicate with its C2. ;; JPIN can send email over SMTP. ;; Kimsuky has used e-mail to send exfiltrated data to C2 servers. ;; LightNeuron uses SMTP for C2. ;; NavRAT uses the email platform Naver for C2 communications leveraging SMTP. ;; OLDBAIT can use SMTP for C2. ;; RDAT can use email attachments for C2 communications. ;; Remsec is capable of using SMTP for C2. ;; SilverTerrier uses SMTP for C2 communications. ;; Turla has used multiple backdoors which communicate with a C2 server via email attachments. ;; Zebrocy uses SMTP and POP3 for C2.
name: Application Layer Protocol: Mail Protocols