DNS Hijacking via Sogou IME: DarkVigil Backdoor Served Over HTTP
SlippyNunchucks hijacked Sogou Input Method DNS requests over plaintext HTTP to drop the DarkVigil backdoor. Our botnet team's take on this classic MITM vector.
DNS hijacking redirects traffic by tampering with DNS records or resolvers — learn how attackers abuse it for phishing, botnet C2, and DDoS amplification.
SlippyNunchucks hijacked Sogou Input Method DNS requests over plaintext HTTP to drop the DarkVigil backdoor. Our botnet team's take on this classic MITM vector.