Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: APT28 has used IMAP, POP3, and SMTP for a communication channel in various implants, including using self-registered Google Mail accounts and later compromised email servers of its victims.