https://blog.kernelstub.dev/tags/c2/Recent content in C2 on Prepakis Georgios | Kernelstub | Security ResearcherHugoen-USFri, 04 Oct 2024 00:00:00 +0000https://blog.kernelstub.dev/posts/domain-generation-algorithms-and-automatic-domain-registration-in-c2/Fri, 04 Oct 2024 00:00:00 +0000https://blog.kernelstub.dev/posts/domain-generation-algorithms-and-automatic-domain-registration-in-c2/<h2 id="what-is-a-domain-generation-algorithm-dga">What Is a Domain Generation Algorithm (DGA)?</h2> <p>If you&rsquo;re running a botnet, you have a problem: your infected hosts need a way to phone home, but the moment defenders find your command and control (C2) domain, they blocklist it, sinkhole it, or hand it to a takedown request, and your whole fleet goes dark at once. A single hardcoded IP or domain baked into your malware is a single point of failure, and it&rsquo;s the first thing an incident responder goes looking for when they pull apart a sample in a sandbox.</p>