virus logo Intrusion Prevention

DNSteal.Data.Exfiltration

description-logoDescription

This indicates detection of attempted data exfiltration using DNSteal.
DNSteal is a tool that can tunnel data over DNS to bypass firewall policy.

affected-products-logoAffected Products

All unprotected systems are vulnerable

Impact logoImpact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

recomended-action-logoRecommended Actions

Monitor the traffic from the network for any suspicious activity.

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Status Detail
2023-12-21 26.701
Modified
 Sig Added
2023-10-04 25.650
Modified
 Sig Added
2022-11-08 22.435
Modified
 Default_action:pass:drop
2022-09-27 22.402
New

References

https://github.com/m57/dnsteal
ID 52155
Created Sep 26, 2022
Updated Dec 21, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
Default Action drop
Active
Affected OS All
Affected App Other
Profile Type Anomaly