April 3, 2023, 2:06 p.m. | MalBot

Malware Analysis, News and Indicators - Latest topics malware.news

This post explores how the DNS protocol can be abused to exfiltrate data by adding bytes of data onto DNS queries or making repeated queries that contain data encoded into the fields of the query.


Article Link: Security Analytics: Using SiLK and Mothra to Identify Data Exfiltration via the Domain Name Service


1 post - 1 participant


Read full topic

analytics article data data exfiltration dns domain domain name exfiltrate data exfiltration identify link making name protocol query security security analytics service

Security Analyst

@ Northwestern Memorial Healthcare | Chicago, IL, United States

GRC Analyst

@ Richemont | Shelton, CT, US

Security Specialist

@ Peraton | Government Site, MD, United States

Information Assurance Security Specialist (IASS)

@ OBXtek Inc. | United States

Cyber Security Technology Analyst

@ Airbus | Bengaluru (Airbus)

Vice President, Cyber Operations Engineer

@ BlackRock | LO9-London - Drapers Gardens