Home / Blog / #dns-hijacking

#dns-hijacking

DNS hijacking redirects traffic by tampering with DNS records or resolvers — learn how attackers abuse it for phishing, botnet C2, and DDoS amplification.

DNS Hijacking via Sogou IME: DarkVigil Backdoor Served Over HTTP

SlippyNunchucks hijacked Sogou Input Method DNS requests over plaintext HTTP to drop the DarkVigil backdoor. Our botnet team's take on this classic MITM vector.