How non-existent domain names can unveil DGA botnets
Tags
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Domain Generation Algorithms - T1637.001 Domain Generation Algorithms - T1568.002 Domain Generation Algorithms - T1520 Domain Generation Algorithms - T1483 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 8e6d0967-3cc6-44ca-90ec-b7f32a6aaf6c
Fingerprint a009d8d60c90a1ad
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 1, 2015, midnight
Added to db Nov. 9, 2023, 1:50 a.m.
Last updated Aug. 31, 2024, 1:10 p.m.
Headline Social media
Title How non-existent domain names can unveil DGA botnets
Detected Hints/Tags/Attributes 24/1/0
Source URLs
Redirection Url
Details Source https://cert.pl/en/posts/2015/10/lang_pljak-nieistniejace-nazwy-domenowe-moga-pomoc-w-wykryciu-botnetow-dgalang_pllang_enhow-non-existent-domain-names-can-unveil-dga-botnets-lang_en/
Details Source https://www.cert.pl/en/news/single/lang_pljak-nieistniejace-nazwy-domenowe-moga-pomoc-w-wykryciu-botnetow-dgalang_pllang_enhow-non-existent-domain-names-can-unveil-dga-botnets-lang_en/
URL Provider
Details Provider Source level domain
Details cert.pl www.cert.pl
Details cert.pl cert.pl
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 81 ✔ CERT Polska https://cert.pl/en/rss.xml 2024-08-30 22:08