value:  APT28 used SMTP as a communication channel in various implants initially using self-registered Google Mail accounts and later compromised email servers of its victims. 
name: Application Layer Protocol: Mail Protocols