The Only Thing That's Constant Is Change: The DNS Changes Channel (SIE Channel 214)
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID b6657c36-e7ca-4f5b-89d1-fcaf11823de3
Fingerprint 259ce8b78a7037c9
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 27, 2018, 7:17 p.m.
Added to db Jan. 18, 2023, 11:11 p.m.
Last updated Sept. 2, 2024, 9:22 p.m.
Headline The Only Thing That's Constant Is Change: The DNS Changes Channel (SIE Channel 214)
Title The Only Thing That's Constant Is Change: The DNS Changes Channel (SIE Channel 214)
Detected Hints/Tags/Attributes 32/2/19
Source URLs
Redirection Url
Details Source https://www.farsightsecurity.com/2018/08/27/stsauver-DNSChanges/
URL Provider
Details Provider Source level domain
Details farsightsecurity.com www.farsightsecurity.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
faceb00k.work
Details Domain 1 
srrbba.faceb00k.work
Details Domain 8 
publicsuffix.org
Details Domain 4 
www.farsightsecurity.com
Details Domain 1 
netflixdnstest6.com
Details Domain 1 
acf46veqahsahgr6atsgs.netflixdnstest6.com
Details Domain 6 
farsightsecurity.com
Details Email 4 
sales@farsightsecurity.com
Details IPv4 1 
61.14.210.110
Details IPv4 1 
18.204.98.127
Details IPv4 1 
18.208.13.229
Details IPv4 1 
34.195.113.199
Details IPv4 1 
34.246.149.52
Details IPv4 1 
34.246.216.245
Details IPv4 1 
35.155.247.161
Details IPv4 1 
35.160.186.158
Details IPv4 1 
52.10.217.81
Details IPv4 1 
54.72.212.34
Details Url 2 
https://publicsuffix.org