*REALLY NEAT* work by Fortinet here decrypting DNS C2 commands.
https://www.fortinet.com/blog/threat-research/inside-a-trickbot-variant-using-dns-tunneling-for-c2
3
Replies
·
0
Boosts
@neurovagrant its very weird to read "neat" and "fortinet" in the same post :D
@Viss @neurovagrant Kind of like Palo Alto. The firewalls are trash but there are some neat research projects.
@cR0w @neurovagrant thats how they getcha. same with qualys. they hire some great researchers, but when you buy the appliance its made of wood and theres a tiny snake oil salesman inside
