CSO Magazine

MARCH 29, 2021

Being the backbone of the internet, the Domain Name System (DNS) protocol has undergone a series of improvements and enhancements over the past few years. To read this article in full, please click here (Insider Story)

DNS 135

DNS Encryption Internet Internet 135

Security Affairs

JUNE 9, 2022

Other techniques employed by the APT group include DLL hijacking, Themida-packed files, and DNS tunneling to evade post-compromise detection. Between 2012 and 2015, the Aoqin Dragon actors heavily relied on exploits for CVE-2012-0158 and CVE-2010-3333 vulnerabilities. The loader will check the file path first and decrypt the payloads.

Malware 82

Malware DNS Encryption Education 82

Security Affairs

JULY 23, 2019

APT15 has been active since at least 2010, it conducted cyber espionage campaigns against targets worldwide in several industries, including the defense, high tech, energy, government, aerospace, and manufacturing. Once executed the command the backdoor returns output through DNS.

DNS 85

DNS Malware Advertising Manufacturing 85

Security Affairs

AUGUST 8, 2018

Ramnit is one of the most popular banking malware families in existence today, it was first spotted in 2010 as a worm, in 2011, its authors improved it starting from the leaked Zeus source code turning the malware into a banking Trojan. The second STAGE-1 C&C server is used for controlling malware via an encrypted connection.

Malware 46

Malware DNS Encryption Banking 46

IT Security Guru

APRIL 12, 2021

It may be that, again utilising specialist tools the operator may be looking for poorly deployed DNS configurations, an Open Zone Transfer opportunity, or Digital Certificate which may be used to facilitate extended access to the Corporate Crown Jewels. See Fig 4 below which provides the additional protection of the durable physical design.

Technology 54

Technology Penetration Testing Education DNS 54

SecureList

JULY 28, 2021

It is linked to a vulnerability in DNS resolvers that allows amplification attacks on authoritative DNS servers. Attacks on DNS servers are dangerous because all the resources they serve become unavailable, regardless of their size and level of DDoS protection. The bug was named TsuNAME.

DDOS 139

DDOS DNS IoT Marketing 139

Cisco Security

NOVEMBER 29, 2021

Cisco Secure supports the NOC operations with DNS visibility and architecture intelligence ( Cisco Umbrella and Cisco Umbrella Investigate ) and automated malware analysis and threat intelligence ( Cisco Secure Malware Analytics (Threat Grid) , backed by Cisco Talos Intelligence and Cisco SecureX ). The other half is Clarity for iOS.

DNS 124

DNS Mobile Malware Firewall 124