Source |
Kaspersky |
Identifiant |
2109879 |
Date de publication |
2020-12-18 13:00:20 (vue: 2020-12-18 13:05:19) |
Titre |
Sunburst: connecting the dots in the DNS requests |
Texte |
We matched private and public DNS data for the SUNBURST-malware root C2 domain with the CNAME records, to identify who was targeted for further exploitation. In total, we analyzed 1722 DNS records, leading to 1026 unique target name parts and 964 unique UIDs. |
Notes |
|
Envoyé |
Oui |
Condensat |
1026 1722 964 analyzed cname connecting data dns domain dots exploitation further identify leading malware matched name parts private public records requests root sunburst sunburst: target targeted total uids unique who |
Tags |
Guideline
|
Stories |
Solardwinds
|
Move |
|