MITRE ATT&CKtechnique
T1637 Dynamic Resolution
- Domain
- mobile
- Tactics
- Command And Control
- Platforms
- Android, iOS
- Version
- 1.1
- Created
- 2022-04-05
Description
Adversaries may dynamically establish connections to command and control infrastructure to evade common detections and remediations. This may be achieved by using malware that shares a common algorithm with the infrastructure the adversary uses to receive the malware's communications. This algorithm can be used to dynamically adjust parameters such as the domain name, IP address, or port number the malware uses for command and control.
Related
Tactic · MITRE ATT&CK (1)
- TA0037 Command and Control tactic
Referenced by MITRE ATT&CK · subtechnique of (1)
- T1637.001 Domain Generation Algorithms sub-technique
References
- https://datadrivensecurity.info/blog/posts/2014/Oct/dga-part2/ Data Driven Security DGA