Read as
Last updated: April 29, 2026
Data exfiltration is the goal of most non-ransomware attacks. Network defenders should know patterns.
Data exfiltration is the goal of most non-ransomware attacks. Network defenders should know patterns.
Common channels
- HTTPS to attacker domain — most common; blends with legit traffic
- HTTPS to cloud storage — Dropbox, Google Drive, AWS S3 (attacker bucket); user-agents look legitimate
- DNS tunneling — covered Module 9 Networking
- ICMP tunneling — niche but possible; ping payloads carry data
- Email — webmail exfil through legitimate corporate email
- Slack / Teams webhooks — outbound to legitimate SaaS but attacker-controlled workspace
Want this for your team?
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.
Book team training call
Replies in 4 working hrs · India-only · Senior consultants