memes Trending

When an attacker installs a backdoor, traditional firewalls block direct outbound connections on unusual ports. To bypass this, backdoors use DNS Tunneling.
​The backdoor encodes malicious commands or stolen data into subdomains of a website it controls (e.g., encoded-stolen-data.attacker.com) and sends a standard DNS lookup request.
​Because every corporate network must allow DNS traffic to resolve website names, the firewall lets it pass. To the untrained eye, the network logs just show millions of routine web requests.
​Defenders have to look for anomalies in log lengths and high volumes of unique, nonsensical subdomains to catch it.
​Hashtags:
#cybersecurity #hacking #memes #blackhat #pentest