Interesting back-channel: [Wayback/Archive] BASE64 Over DNS – SANS Internet Storm Center covered in the blog
- [Wayback/Archive] SANS Stormcast Wednesday, September 3rd, 2025: Sextortiion Analysis; Covert Channel DNS/ICMP; Azure AD Secret Theft; Official FreePBX Patches
- [Wayback/Archive] MystRodX: The Covert Dual-Mode Backdoor Threat
It reminds me over other tunneling techniques over DNS like the below VPN over DNS one that have existed for quite a while now (for instance in Captive portal: DNS Tunneling).
Last year, it raised attention because of [Wayback/Archive] MystRodX: The Covert Dual-Mode Backdoor Threat.
Nothing new though, but still interesting (:
Anyway, some links on stuff that has existed for a while:





