Skip to content
Threat Feed
Subscribe

Tag

Dead-Drop-Resolver

1 brief RSS
high advisory

Detection of Unauthorized Connections to Dead Drop Resolver Domains

This brief details the detection of malicious executables establishing network connections to legitimate popular websites, known as dead drop resolvers, to conduct covert command and control (C2) communications, allowing threat actors to evade traditional security controls and maintain persistent access for data exfiltration or further compromise.

command-and-control network-connection dead-drop-resolver windows
1r 1t