DNS-over-HTTPS

Advanced China-Nexus Group Strikes Southeast Asian Networks

• Cyber Security

Advanced China-Nexus Group Strikes Southeast Asian Networks

Do Son June 1, 2026 0

A dangerous custom Linux router implant targets edge networks. Learn how this campaign uses router DNS hijacking to evade classic endpoint EDR tools.

Trojanized FileZilla FTP Client Targets Developer Credentials via DLL Sideloading

• Malware

Trojanized FileZilla FTP Client Targets Developer Credentials via DLL Sideloading

Do Son March 4, 2026 0

Malwarebytes uncovers a trojanized FileZilla campaign using DLL hijacking and DNS-over-HTTPS to silently steal FTP credentials and bypass security.

Dohdoor: New Stealth Backdoor Targets US Healthcare and Education

• Malware

Dohdoor: New Stealth Backdoor Targets US Healthcare and Education

Do Son March 2, 2026 0

Cisco Talos uncovers "Dohdoor," a stealthy backdoor used by UAT-10027. It abuses DNS-over-HTTPS via Cloudflare to spy on U.S. healthcare and education sectors.

SHOE RACK Malware: NCSC Uncovers Stealthy Reverse SSH & DoH Post-Exploitation Tool Targeting FortiGate Firewalls

• Malware

SHOE RACK Malware: NCSC Uncovers Stealthy Reverse SSH & DoH Post-Exploitation Tool Targeting FortiGate Firewalls

Do Son June 24, 2025 0

NCSC reveals SHOE RACK, a stealthy post-exploitation malware using reverse SSH tunneling, DoH, and protocol abuse to maintain remote access on FortiGate 100D firewalls.

Earth Kasha Refines Spear-Phishing Tactics in Espionage Campaign Targeting Taiwan and Japan

• Cyber Security
• Malware

Earth Kasha Refines Spear-Phishing Tactics in Espionage Campaign Targeting Taiwan and Japan

Do Son May 1, 2025 0

Earth Kasha targets Taiwan and Japan in a March 2025 spear-phishing campaign using ANEL and NOOPDOOR backdoors for stealthy cyber espionage.

High-Severity DoS Vulnerability Found in PowerDNS DNSdist (CVE-2025-30194)

• Vulnerability

High-Severity DoS Vulnerability Found in PowerDNS DNSdist (CVE-2025-30194)

Do Son April 30, 2025 0

Critical DoS vulnerability (CVE-2025-30194) impacts PowerDNS DNSdist 1.9.0-1.9.8 with DoH. Upgrade to 1.9.9 or use h2o provider.

ISC Patches Two Vulnerabilities – CVE-2024-11187 and CVE-2024-12705

• Vulnerability

ISC Patches Two Vulnerabilities – CVE-2024-11187 and CVE-2024-12705

Do Son January 30, 2025 0

Critical vulnerabilities in BIND DNS software: CVE-2024-11187 and CVE-2024-12705. Understand the risks of denial-of-service attacks on DNS servers and resolvers.