Técnica MITRE ATT&CK · Mando y control

`T1568` Dynamic Resolution

Adversaries may dynamically establish connections to command and control infrastructure to evade common detections and remediations. This may be achieved by using malware that shares a common algorithm with the infrastructure the adversary uses to receive the malware's communications. These calculations can be used to dynamically adjust parameters such as the domain name, IP address, or port…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

Amadey

Reglas Sigma para cazarla

Communication To Ngrok Tunneling Service - Linuxhightest · linux
Communication To Ngrok Tunneling Service Initiatedhightest · windows
Axios NPM Compromise Malicious C2 Domain DNS Queryhighexperimental · dns
Download from Suspicious Dyndns Hostsmediumtest · proxy

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.