ITM is an open framework - Submit your contributions now.

Insider Threat Matrix™Insider Threat Matrix™
  • ID: IF005
  • Created: 31st May 2024
  • Updated: 22nd September 2024
  • Contributor: The ITM Team

Exfiltration via Messaging Applications

A subject uses a messaging application to exfiltrate data through messages or uploaded media.

Subsections (2)

ID Name Description
IF005.001Exfiltration via Installed Messaging Application

A subject exfiltrates information using a messaging application that is already installed on the system. They will access the conversation at a later date to retrieve information on a different system.

IF005.002Exfiltration via Web-Based Messaging Application

A subject exfiltrates information using a web-based messaging application that is accessed through a web browser. They will access the conversation at a later date to retrieve information on a different system.