Tag Archives: DNS

Brighton-based ISP and hosting provider Fastnet has emerged from a trying week which involved battling VMware/Broadcom tech issues that have downed a number of its customers’ websites.

The outage began on August 13, at which point Fastnet said its technical team was engaged “at the highest level with the vendor” and was working as quickly as possible to restore services.

Fastnet repurposed its homepage into a rolling live blog of progress updates, posting a new one roughly every two hours during workdays. The company didn’t, however, reveal much in the way of technical details about the outage, only attributing the woes to its VMware hosting platform.

“Fastnet are currently experiencing a major, wide-scale…

Hackers often abuse DNS and ICMP tunneling to transmit data and bypass network security measures covertly.

All these protocols, which are often enabled by poorly protected firewalls, can be manipulated to create hidden communication routes for transferring sensitive data out or creating entry points for unauthorized users.

This evasion technique enables threat actors to maintain persistence and avoid detection within compromised networks.

Positive Technologies researchers recently discovered that ExCobalt’s new tool, GoRed, uses DNS and ICMP tunneling for C2 server communication.

GoRed Using DNS & ICMP Tunneling

ExCobalt, a group of cyber criminals likely to be an extension of Cobalt, notoriously known for attacks on financial institutions,…

Cybersecurity researchers unveiled a sophisticated scam operation, “Savvy Seahorse,” exploiting victims through advanced DNS manipulation techniques.

This operation, active since at least August 2021, has flown under the radar by leveraging DNS canonical name (CNAME) records to create a dynamic and elusive traffic distribution system (TDS) for financial scam campaigns.

A Novel Approach to Cybercrime

Savvy Seahorse’s campaigns are not your typical phishing attempts. They incorporate fake ChatGPT and WhatsApp bots that provide automated responses, luring victims into providing personal information under the guise of high-return investment opportunities.

These campaigns target a wide range of language speakers, including Russian, Polish,…