Walled Off: Handling DNS Poisoning At Scale
Tags
country: China
attack-pattern: Data Code Repositories - T1213.003 Code Repositories - T1593.003 Dns - T1071.004 Dns - T1590.002 Dns Poisoning - T1382 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID e5d152f9-5304-4a33-a81b-2f192fbf6137
Fingerprint 733988d12c22b7c5
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 27, 2022, midnight
Added to db Nov. 17, 2024, 12:56 p.m.
Last updated Nov. 17, 2024, 12:57 p.m.
Headline Walled Off: Handling DNS Poisoning At Scale
Title Walled Off: Handling DNS Poisoning At Scale
Detected Hints/Tags/Attributes 41/2/18
Source URLs
Redirection Url
Details Source https://labs.watchtowr.com/walled-off-handling-dns-poisoning-at-scale/
URL Provider
Details Provider Source level domain
Details watchtowr.com labs.watchtowr.com
Attributes
Details Type #Events CTI Value
Details Domain 4 
www.watchtowr.com
Details Domain 1 
invalidcontoso.com
Details Domain 1 
admin.invalidcontoso.com
Details Domain 1 
secret.invalidcontoso.com
Details Domain 1 
backup.invalidcontoso.com
Details Domain 1 
vipfashion.com
Details Domain 1 
dns1.hichina.com
Details Domain 1 
dns2.hichina.com
Details Domain 1 
kman.vipfashion.com
Details Domain 1 
gfwatch.org
Details Domain 113 
www.usenix.org
Details Domain 1 
www.cs.albany.edu
Details File 1 
sec21-hoang.pdf
Details File 252 
www.cs
Details File 1 
holdon.pdf
Details Url 4 
https://www.watchtowr.com
Details Url 1 
https://www.usenix.org/system/files/sec21-hoang.pdf
Details Url 1 
http://www.cs.albany.edu/~mariya/courses/csi516f19/papers/holdon.pdf