Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Cobalt Group has used public sites such as github.com and sendspace.com to upload files and then download them to victim computers. The group's JavaScript backdoor is also capable of downloading files.