What MITRE ATT&CK T1102: Web Service (Command and Control) requires
MITRE ATT&CK T1102 covers adversary abuse of legitimate web services (GitHub, Pastebin, Discord, Dropbox, Telegram, Slack, X/Twitter, GitHub Gist) for command-and-control communication, blending malicious traffic with legitimate enterprise SaaS use. Sub-techniques: Dead Drop Resolver (T1102.001), Bidirectional Communication (T1102.002), One-Way Communication (T1102.003). Compliance: NIST 800-53 SC-7, SI-4, ISO 27001 A.8.20, A.8.23, PCI DSS Req 11.4.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1102/
SHA-256 integrity: 230765980abd4fa54315db15488d16fb63868bb7a04ed395ce22d7cdbec621de
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1102: Web Service (https://attack.mitre.org/techniques/T1102/) with 3 sub-techniques
- NIST SP 800-53 Rev 5: SC-7, SI-4
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
⚠ Important: Human Verification Required
Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.