TLDR InfoSec · STRATEGIES & TACTICS

LEVERAGING DNS TUNNELING FOR TRACKING AND SCANNING

unit42.paloaltonetworks.com13 min read

Summary from the TLDR InfoSec newsletter

This blog post describes the DNS Tunneling attack technique, which is a method for attackers to hide and transport data through DNS traffic. Malicious actors can use DNS tunneling to track user activities and communicate with compromised hosts. Organizations can detect and mitigate DNS tunneling campaigns effectively by analyzing indicators like domains and IP addresses.