DNS ATT&CK 2020 - review of the most interesting techniques
summary
A review of notable offensive techniques from 2020 that used DNS, covering multi-stage malware delivery via DNS, DNS-enabled remote code execution vulnerabilities, thefts of credit card data, methods attackers used to bypass reputation systems when resolving C2 addresses, and DNS-based tactics used in phishing campaigns.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 4:45DNS tunneling in browser
- 12:34Credit card data via DNS
- 17:29DNS malware variants
- 21:44Phishing with look-alike domains
- 31:07DNS server/client exploits
- 35:03DNS-based DDoS attacks
- 42:53Future of DNS: HTTPS/SVCB
- 47:09Summary
related talks
22mDNS is Under Attack - the Miscreant's Offensive Playbook with a Defensive Counter
47mDNS On Fire
41mWhen Cybersecurity Is More Than Just Vulnerabilities
32mDNS as Added Security Against Ransomware Attacks
42mKeynote: The Expanding Universe of Cyber Threats
34mPractical Steps for Reducing Exposure and Detecting Compromise
26mMisuse of DNS, the Second Most Used Protocol
19mCloudy with a Chance of Cyberattacks: Dangling Resources Abuse on Cloud Platforms