Common Information
| Type | Value |
|---|---|
| Value |
DNS - T1071.004 |
| Category | Attack-Pattern |
| Type | Mitre-Attack-Pattern |
| Misp Type | Cluster |
| Description | Adversaries may communicate using the Domain Name System (DNS) application layer protocol to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server. The DNS protocol serves an administrative function in computer networking and thus may be very common in environments. DNS traffic may also be allowed even before network authentication is completed. DNS packets contain many fields and headers in which data can be concealed. Often known as DNS tunneling, adversaries may abuse DNS to communicate with systems under their control within a victim network while also mimicking normal, expected traffic.(Citation: PAN DNS Tunneling)(Citation: Medium DnsTunneling) |
| Details | Published | Attributes | CTI | Title | ||
|---|---|---|---|---|---|---|
| Details | Website | 2025-01-22 | 18 | Fileless Malware Nedir? S1Ep2 Cobalt Kitty Operasyonu | ||
| Details | Website | 2025-01-22 | 40 | Dark Web Profile: OilRig (APT34) - SOCRadar® Cyber Intelligence Inc. | ||
| Details | Website | 2025-01-22 | 0 | PlushDaemon APT Targeted South Korean VPN Software | ||
| Details | Website | 2025-01-22 | 127 | Targeted supply chain attack against Chrome browser extensions | ||
| Details | Website | 2025-01-22 | 8 | Understanding Social Engineering and Phishing | ||
| Details | Website | 2025-01-22 | 0 | Deception Technologies | ||
| Details | Website | 2025-01-22 | 0 | 什麼是中間人攻擊（Man-in-the-Middle Attack）？ | ||
| Details | Website | 2025-01-22 | 7 | Networking Protocols Explained P2 | TryHackMe Networking Core Protocols | ||
| Details | Website | 2025-01-22 | 0 | WhatsApp Abused To Target High-Value Diplomats | ||
| Details | Website | 2025-01-22 | 1 | Free VPN for Nigeria: How to Bypass Restrictions and Protect Your Online Privacy | ||
| Details | Website | 2025-01-22 | 15 | Uncovering Malicious Activity: Analyzing Real-World Scenarios of Process Abuse and Persistence | ||
| Details | Website | 2025-01-22 | 0 | The Comprehensive Guide to Penetration Testing and Related Concepts | ||
| Details | Website | 2025-01-22 | 2 | 13 000 маршрутизаторов MikroTik захвачены ботнетом для рассылки вредоносного спама и кибератак - SEC-1275-1 | ||
| Details | Website | 2025-01-22 | 11 | MasterCard DNS Error Went Unnoticed for Years – Krebs on Security | ||
| Details | Website | 2025-01-22 | 10 | Catching CARP: Fishing for Firewall States in PFSync Traffic - SANS Internet Storm Center | ||
| Details | Website | 2025-01-21 | 5 | CPTS — Enumeration With Nmap | ||
| Details | Website | 2025-01-21 | 0 | What Is Computer Network Security? | ||
| Details | Website | 2025-01-21 | 0 | What Is Computer Network Security? | ||
| Details | Website | 2025-01-21 | 0 | The blockchain decentralized misconception | ||
| Details | Website | 2025-01-21 | 0 | Introduction to Digital Forensics: Practical Guide to Steps, Techniques and Tools | ||
| Details | Website | 2025-01-21 | 12 | Mastering Kali Linux Web Pentesting Tools: An Ultra-Extensive Guide to Advanced Web Security… | ||
| Details | Website | 2025-01-21 | 7 | Record-breaking 5.6 Tbps DDoS attack and global DDoS trends for 2024 Q4 | ||
| Details | Website | 2025-01-21 | 6 | The fall and rise of TikTok (traffic) | ||
| Details | Website | 2025-01-21 | 0 | Best Automated Patch Management Software in 2025 | ||
| Details | Website | 2025-01-21 | 6 | Cobalt Strike Beacon Detected - 154[.]223[.]21[.]105:443 - RedPacket Security |