DNS is Under Attack - the Miscreant's Offensive Playbook with a Defensive Counter
summary
DNS is an easy, high-return target: criminals run cyclical DDoS extortion waves and ransom probes, map registrar access and use registrar compromise (Sea Turtle) to seize zones, or penetrate to a hidden primary then ransom or sabotage it. Attacks leverage open resolvers and home CPEs via pseudo-random domain reflection to saturate paths. Concrete counters offered include moving authoritative into hidden primary + cloud secondaries, enforcing registrar EPP and account hygiene, using published ICANN/NIST checklists, and noting DNSSEC validation gaining traction as a practical defense.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 1:07What is a threat
- 2:03The jest of the risk
- 2:34The DNS system
- 3:35The Miscreants Offensive Playbook
- 4:00How do you control the domain
- 4:55Registry attacks
- 6:06Externally visible DNS servers
- 7:16Open DNS reflectors
- 7:45Service Providers
- 8:12Pseudorandom Domain Attack
- 8:55Complex Attack Factor
- 9:07Wake Up Call
- 10:18Power Recommendations
- 15:05DNS Sec
- 17:09Priorities
- 17:55Public Materials
- 18:18Monetization Factors
- 20:32Chat Room
- 20:42Contact
related talks
47mDNS On Fire
25mDark Side of the DNS Force
32mDNS as Added Security Against Ransomware Attacks
34mPractical Steps for Reducing Exposure and Detecting Compromise
26mMisuse of DNS, the Second Most Used Protocol
48mDNS ATT&CK 2020 - review of the most interesting techniques
52mPower of DNS as an Added Defense Against Modern Attacks
29mMaginotDNS: Attacking the Boundary of DNS Caching Protection