DNS Tunneling in the Wild: Overview of OilRig’s DNS Tunneling
released on 2019-04-17 @ 08:27:48 AM
On March 15, Unit 42 published a blog providing an overview of DNS tunneling and how malware can use DNS queries and answers to act as a command and control channel. To supplement this blog, we have decided to describe a collection of tools that rely on DNS tunneling used by an adversary known as OilRig.