MITRE ATT&CK ICS
T1695

Block Communications

Description

Operational technology communications occur over serial COM, Ethernet, Wi-Fi, cellular (4G/5G), and satellite mediums. Adversaries may block communications to prevent reporting messages and command messages from reaching their intended target devices disrupting processes, operations, and causing cyber-physical impacts.(Citation: Bonnie Zhu, Anthony Joseph, Shankar Sastry 2011) Adversaries may block communications by either making modifications to software ([System Firmware](https://attack.mitre.org/techniques/T0857), [Module Firmware](https://attack.mitre.org/techniques/T0839), [Hooking](https://attack.mitre.org/techniques/T0874), and [Rootkit](https://attack.mitre.org/techniques/T0851)) and services ([Service Stop](https://attack.mitre.org/techniques/T0881), [Denial of Service](https://attack.mitre.org/techniques/T0814)) on systems and devices or by positioning themselves between systems and devices and intercepting and blocking the communications such as the case with an [Adversary-in-the-Middle](https://attack.mitre.org/techniques/T0830) attack.

Mapped SPARTA techniques

4 techniques

  • DE-0002.02Jam Link SignalST0006
    addresses
    moderate

    T1695 'Block Communications' addresses adversary inhibiting communications between operator-related systems and assets — exact concept-match for SPARTA DE-0002.02 'Jam Link Signal' (jamming inhibits the link). Cross-tactic moderate (T1695 in inhibit-response-function vs SPARTA DE-0002.02 defense-evasion).

  • EX-0016JammingST0004
    addresses
    moderate

    T1695 'Block Communications' addresses adversary inhibiting communications between operations control and assets, hindering operator ability to monitor and control — exact concept-match for SPARTA EX-0016 'Jamming' which produces the same operational outcome. Cross-tactic moderate (T1695 in inhibit-response-function vs SPARTA EX-0016 execution).

  • EX-0016.01Uplink JammingST0004
    addresses
    moderate

    Uplink jamming inhibits the ground-to-spacecraft command-channel communications; T1695 'Block Communications' covers this at cross-tactic moderate level.

  • EX-0016.02Downlink JammingST0004
    addresses
    moderate

    Downlink jamming inhibits the spacecraft-to-ground telemetry/payload communications; T1695 'Block Communications' covers this at cross-tactic moderate level.

Cite as SafeMode Space, mitre-attack-ics T1695.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.