DNS

We talk about everything that has to do with the Domain Name System (DNS) here, such as news about DNS technologies, security changes, best practices for configuration, and new trends. We talk about how DNS works, what part it plays in the internet’s infrastructure, and how to make DNS work better. Keep up with the latest changes and improvements in DNS to make sure that managing domains is safe and effective.

Project CAV3RN Uses Google Apps Script and DNS to Hide C2 Traffic in Israeli Cyberespionage Attacks

Project CAV3RN, a modular cyberespionage framework targeting organizations in Israel, has added a sophisticated command-and-control design that dynamically blends direct…

2 months ago

New TrickBot Malware Variant Uses DNS Tunneling for Command-and-Control

A new TrickBot malware variant that significantly evolves its command-and-control (C2) communication by leveraging DNS tunneling, replacing the traditional HTTP-based…

3 months ago

Russian Threat Actors Abuse Home Routers in Expanding DNS Hijacking Wave

Russian military-linked hackers are actively compromising poorly secured home and small-office routers to hijack internet traffic and spy on organizations…

6 months ago

Cyberattackers Exploit DNS TXT Records in ClickFix Script to Execute Malicious PowerShell Commands

A new evolution in the "ClickFix" social engineering campaigns, dubbed KongTuke. This latest variant, observed actively since late December 2025, distinguishes…

9 months ago

Shadow DNS Operation Abuses Compromised Routers to Manipulate Internet Traffic

A sophisticated shadow DNS network that hijacks internet traffic by compromising home and business routers. The operation, active since mid-2022,…

9 months ago

New Kerberos Relay Technique Exploits DNS CNAMEs to Bypass Existing Defenses

A critical vulnerability in Windows Kerberos authentication that enables attackers to conduct credential-relay attacks by exploiting DNS CNAME records. Tracked…

9 months ago

New DNS Malware ‘Detour Dog’ Uses TXT Records to Deliver Strela Stealer

Detour Dog, a stealthy website malware campaign tracked since August 2023, has evolved from redirecting victims to tech-support scams into…

1 year ago

Threat Actors Exploiting Dynamic DNS Providers for Malicious Activity

Cybersecurity researchers have identified a growing trend where threat actors are increasingly exploiting Dynamic DNS providers to host malicious infrastructure,…

1 year ago

New Botnet Exploits Simple DNS Flaws That Leads to Massive Cyber Attack

Cybersecurity researchers have uncovered a sophisticated Russian botnet operation that leveraged DNS misconfigurations and compromised MikroTik routers to deliver malware…

1 year ago

CoreDNS Vulnerability Allows Attackers to Poison DNS Cache and Block Updates

A critical flaw in CoreDNS’s etcd plugin can let attackers pin DNS records in caches for years, effectively blocking legitimate…

1 year ago