T1071.004

Application Layer Protocol: DNS

discovered 2025-08-12

In addition to the HTTPS POST, Wave 4 issues a DNS resolver beacon, providing a low-profile secondary signalling/exfil channel that survives HTTP egress filtering.

View on MITRE ATT&CK

Seen in packages

Campaigns