3 ms·
Calling random domains to circumvent blacklists an "advanced malware technique" is tabloid-speak.
by blattimwind 9y ago
Calling random domains to circumvent blacklists an "advanced malware technique" is tabloid-speak.
- belorn 9y agoThe use of short lived auto generated domain names is the kind of patterns that triggers maleware warning at domain registrars and I know IIS (registry for .se) have people being paid to actually monitor such type of domain abuse. The domain industry see it as abuse and "advanced malware technique" would not be out of the question when describing it. Also, it not just random domain names. It is random registrant data. It is short lived domain names. It is obfuscated NS infrastructure.
- Cyph0n 9y agoIt's kind of related to so-called domain generation algorithms (DGAs) commonly used by malware to circumvent blacklists and network filtering.